From a9c07c7fd621f757f7bb2a15c283252de3afc8cc Mon Sep 17 00:00:00 2001 From: Udit Gaurav <35391335+uditgaurav@users.noreply.github.com> Date: Sat, 15 May 2021 19:57:05 +0530 Subject: [PATCH] Chore(ebs-loss): Add EBS Loss By Tag Experiment (#459) * Chore(ebs-loss): Add EBS Loss By Tag Experiment Signed-off-by: uditgaurav --- charts/generic/pod-dns-error/engine.yaml | 1 + charts/generic/pod-dns-spoof/engine.yaml | 1 + .../ebs-loss-by-id.chartserviceversion.yaml} | 16 ++-- charts/kube-aws/ebs-loss-by-id/engine.yaml | 31 +++++++ .../experiment.yaml | 24 ++--- .../{ebs-loss => ebs-loss-by-id}/rbac.yaml | 16 ++-- .../ebs-loss-by-tag.chartserviceversion.yaml | 45 ++++++++++ .../{ebs-loss => ebs-loss-by-tag}/engine.yaml | 23 +++-- .../kube-aws/ebs-loss-by-tag/experiment.yaml | 83 ++++++++++++++++++ charts/kube-aws/ebs-loss-by-tag/rbac.yaml | 46 ++++++++++ .../kube-aws/ec2-terminate-by-tag/engine.yaml | 2 +- .../ec2-terminate-by-tag/experiment.yaml | 3 + .../{ebs-loss.png => ebs-loss-by-id.png} | Bin charts/kube-aws/icons/ebs-loss-by-tag.png | Bin 0 -> 3152 bytes .../kube-aws.chartserviceversion.yaml | 3 +- charts/kube-aws/kube-aws.package.yaml | 10 ++- 16 files changed, 257 insertions(+), 47 deletions(-) rename charts/kube-aws/{ebs-loss/ebs-loss.chartserviceversion.yaml => ebs-loss-by-id/ebs-loss-by-id.chartserviceversion.yaml} (69%) create mode 100644 charts/kube-aws/ebs-loss-by-id/engine.yaml rename charts/kube-aws/{ebs-loss => ebs-loss-by-id}/experiment.yaml (85%) rename charts/kube-aws/{ebs-loss => ebs-loss-by-id}/rbac.yaml (81%) create mode 100644 charts/kube-aws/ebs-loss-by-tag/ebs-loss-by-tag.chartserviceversion.yaml rename charts/kube-aws/{ebs-loss => ebs-loss-by-tag}/engine.yaml (53%) create mode 100644 charts/kube-aws/ebs-loss-by-tag/experiment.yaml create mode 100644 charts/kube-aws/ebs-loss-by-tag/rbac.yaml rename charts/kube-aws/icons/{ebs-loss.png => ebs-loss-by-id.png} (100%) create mode 100644 charts/kube-aws/icons/ebs-loss-by-tag.png diff --git a/charts/generic/pod-dns-error/engine.yaml b/charts/generic/pod-dns-error/engine.yaml index 4181ab9..7d65e30 100644 --- a/charts/generic/pod-dns-error/engine.yaml +++ b/charts/generic/pod-dns-error/engine.yaml @@ -9,6 +9,7 @@ spec: appkind: "deployment" # It can be active/stop engineState: "active" + annotationCheck: 'false' #ex. values: ns1:name=percona,ns2:run=nginx auxiliaryAppInfo: "" chaosServiceAccount: pod-dns-error-sa diff --git a/charts/generic/pod-dns-spoof/engine.yaml b/charts/generic/pod-dns-spoof/engine.yaml index ed6e959..f6dec4b 100644 --- a/charts/generic/pod-dns-spoof/engine.yaml +++ b/charts/generic/pod-dns-spoof/engine.yaml @@ -9,6 +9,7 @@ spec: appkind: "deployment" # It can be active/stop engineState: "active" + annotationCheck: 'false' #ex. values: ns1:name=percona,ns2:run=nginx auxiliaryAppInfo: "" chaosServiceAccount: pod-dns-spoof-sa diff --git a/charts/kube-aws/ebs-loss/ebs-loss.chartserviceversion.yaml b/charts/kube-aws/ebs-loss-by-id/ebs-loss-by-id.chartserviceversion.yaml similarity index 69% rename from charts/kube-aws/ebs-loss/ebs-loss.chartserviceversion.yaml rename to charts/kube-aws/ebs-loss-by-id/ebs-loss-by-id.chartserviceversion.yaml index 15d8fb1..f54af7f 100644 --- a/charts/kube-aws/ebs-loss/ebs-loss.chartserviceversion.yaml +++ b/charts/kube-aws/ebs-loss-by-id/ebs-loss-by-id.chartserviceversion.yaml @@ -2,23 +2,23 @@ apiVersion: litmuchaos.io/v1alpha1 kind: ChartServiceVersion metadata: createdAt: 2020-10-28T10:28:08Z - name: ebs-loss + name: ebs-loss-by-id version: 0.1.0 annotations: categories: Kubernetes vendor: CNCF support: https://slack.kubernetes.io/ spec: - displayName: ebs-loss + displayName: ebs-loss-by-id categoryDescription: | - EBS Loss contains chaos to disrupt state of infra resources. The experiment can induce ebs volume loss against specified application. - - Causes ebs volume loss from node or ec2 instance for a certain chaos duration - - Causes Pod to get Evicted if the Pod exceeds it Ephemeral Storage Limit. + EBS Loss By ID contains chaos to disrupt state of infra resources. The experiment can induce ebs volume loss against specified application for the give EBS Volume(s). + - Causes ebs volume loss from node or ec2 instance for a certain chaos interval from total chaos duration. - Tests deployment sanity (replica availability & uninterrupted service) and recovery workflows of the application pod keywords: - Kubernetes - EBS - Volume + - ID - State platforms: - AWS @@ -34,12 +34,12 @@ spec: app.kubernetes.io/version: latest links: - name: Source Code - url: https://github.com/litmuschaos/litmus-go/tree/master/experiments/kube-aws/ebs-loss + url: https://github.com/litmuschaos/litmus-go/tree/master/experiments/kube-aws/ebs-loss-by-id - name: Documentation - url: https://docs.litmuschaos.io/docs/ebs-loss/ + url: https://docs.litmuschaos.io/docs/ebs-loss-by-id/ - name: Video url: icon: - url: mediatype: "" - chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/kube-aws/ebs-loss/experiment.yaml + chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/kube-aws/ebs-loss-by-id/experiment.yaml diff --git a/charts/kube-aws/ebs-loss-by-id/engine.yaml b/charts/kube-aws/ebs-loss-by-id/engine.yaml new file mode 100644 index 0000000..5e60715 --- /dev/null +++ b/charts/kube-aws/ebs-loss-by-id/engine.yaml @@ -0,0 +1,31 @@ +apiVersion: litmuschaos.io/v1alpha1 +kind: ChaosEngine +metadata: + name: nginx-chaos + namespace: default +spec: + engineState: 'active' + annotationCheck: 'false' + chaosServiceAccount: ebs-loss-by-id-sa + # It can be retain/delete + jobCleanUpPolicy: 'delete' + experiments: + - name: ebs-loss-by-id + spec: + components: + env: + # set chaos duration (in sec) as desired + - name: TOTAL_CHAOS_DURATION + value: '30' + + # set chaos duration (in sec) as desired + - name: CHAOS_INTERVAL + value: '30' + + # set target ebs volume ID + - name: EBS_VOLUME_ID + value: '' + + # provide the region name of the instance + - name: REGION + value: '' diff --git a/charts/kube-aws/ebs-loss/experiment.yaml b/charts/kube-aws/ebs-loss-by-id/experiment.yaml similarity index 85% rename from charts/kube-aws/ebs-loss/experiment.yaml rename to charts/kube-aws/ebs-loss-by-id/experiment.yaml index f22d3ee..74bdd0e 100644 --- a/charts/kube-aws/ebs-loss/experiment.yaml +++ b/charts/kube-aws/ebs-loss-by-id/experiment.yaml @@ -4,9 +4,9 @@ description: Detaching an ebs volume from ec2 instance. kind: ChaosExperiment metadata: - name: ebs-loss + name: ebs-loss-by-id labels: - name: ebs-loss + name: ebs-loss-by-id app.kubernetes.io/part-of: litmus app.kubernetes.io/component: chaosexperiment app.kubernetes.io/version: latest @@ -39,26 +39,29 @@ spec: imagePullPolicy: Always args: - -c - - ./experiments -name ebs-loss + - ./experiments -name ebs-loss-by-id command: - /bin/bash env: - name: TOTAL_CHAOS_DURATION - value: '60' + value: '30' + + - name: CHAOS_INTERVAL + value: '30' # Period to wait before and after injection of chaos in sec - name: RAMP_TIME value: '' - - name: EC2_INSTANCE_ID - value: '' - - - name: EBS_VOL_ID + - name: EBS_VOLUME_ID value: '' - name: REGION value: '' + - name: SEQUENCE + value: 'parallel' + # Provide the path of aws credentials mounted from secret - name: AWS_SHARED_CREDENTIALS_FILE value: '/tmp/cloud_config.yml' @@ -68,11 +71,8 @@ spec: - name: LIB value: 'litmus' - - name: DEVICE_NAME - value: '' - labels: - name: ebs-loss + name: ebs-loss-by-id app.kubernetes.io/part-of: litmus app.kubernetes.io/component: experiment-job app.kubernetes.io/version: latest diff --git a/charts/kube-aws/ebs-loss/rbac.yaml b/charts/kube-aws/ebs-loss-by-id/rbac.yaml similarity index 81% rename from charts/kube-aws/ebs-loss/rbac.yaml rename to charts/kube-aws/ebs-loss-by-id/rbac.yaml index 3f61539..418cf4a 100644 --- a/charts/kube-aws/ebs-loss/rbac.yaml +++ b/charts/kube-aws/ebs-loss-by-id/rbac.yaml @@ -2,18 +2,18 @@ apiVersion: v1 kind: ServiceAccount metadata: - name: ebs-loss-sa + name: ebs-loss-by-id-sa namespace: default labels: - name: ebs-loss-sa + name: ebs-loss-by-id-sa app.kubernetes.io/part-of: litmus --- apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRole metadata: - name: ebs-loss-sa + name: ebs-loss-by-id-sa labels: - name: ebs-loss-sa + name: ebs-loss-by-id-sa app.kubernetes.io/part-of: litmus rules: - apiGroups: [""] @@ -32,15 +32,15 @@ rules: apiVersion: rbac.authorization.k8s.io/v1 kind: ClusterRoleBinding metadata: - name: ebs-loss-sa + name: ebs-loss-by-id-sa labels: - name: ebs-loss-sa + name: ebs-loss-by-id-sa app.kubernetes.io/part-of: litmus roleRef: apiGroup: rbac.authorization.k8s.io kind: ClusterRole - name: ebs-loss-sa + name: ebs-loss-by-id-sa subjects: - kind: ServiceAccount - name: ebs-loss-sa + name: ebs-loss-by-id-sa namespace: default diff --git a/charts/kube-aws/ebs-loss-by-tag/ebs-loss-by-tag.chartserviceversion.yaml b/charts/kube-aws/ebs-loss-by-tag/ebs-loss-by-tag.chartserviceversion.yaml new file mode 100644 index 0000000..b9a1d93 --- /dev/null +++ b/charts/kube-aws/ebs-loss-by-tag/ebs-loss-by-tag.chartserviceversion.yaml @@ -0,0 +1,45 @@ +apiVersion: litmuchaos.io/v1alpha1 +kind: ChartServiceVersion +metadata: + createdAt: 2021-05-15T10:28:08Z + name: ebs-loss-by-tag + version: 0.1.0 + annotations: + categories: Kubernetes + vendor: CNCF + support: https://slack.kubernetes.io/ +spec: + displayName: ebs-loss-by-tag + categoryDescription: | + EBS Loss By Tag contains chaos to disrupt state of infra resources. The experiment can induce ebs volume loss against specified application for given volume tag. + - Causes ebs volume loss by tag from node or ec2 instance for certain chaos interval from total chaos duration. + - Tests deployment sanity (replica availability & uninterrupted service) and recovery workflows of the application pod + keywords: + - Kubernetes + - EBS + - Volume + - Tag + - State + platforms: + - AWS + maturity: alpha + chaosType: infra + maintainers: + - name: Udit Gaurav + email: uditgaurav@mayadata.io + provider: + name: Mayadata + labels: + app.kubernetes.io/component: chartserviceversion + app.kubernetes.io/version: latest + links: + - name: Source Code + url: https://github.com/litmuschaos/litmus-go/tree/master/experiments/kube-aws/ebs-loss-by-tag + - name: Documentation + url: https://docs.litmuschaos.io/docs/ebs-loss-by-tag/ + - name: Video + url: + icon: + - url: + mediatype: "" + chaosexpcrdlink: https://raw.githubusercontent.com/litmuschaos/chaos-charts/master/charts/kube-aws/ebs-loss-by-tag/experiment.yaml diff --git a/charts/kube-aws/ebs-loss/engine.yaml b/charts/kube-aws/ebs-loss-by-tag/engine.yaml similarity index 53% rename from charts/kube-aws/ebs-loss/engine.yaml rename to charts/kube-aws/ebs-loss-by-tag/engine.yaml index 642fde5..b201c11 100644 --- a/charts/kube-aws/ebs-loss/engine.yaml +++ b/charts/kube-aws/ebs-loss-by-tag/engine.yaml @@ -5,30 +5,27 @@ metadata: namespace: default spec: engineState: 'active' - chaosServiceAccount: ebs-loss-sa + annotationCheck: 'false' + chaosServiceAccount: ebs-loss-by-tag-sa # It can be retain/delete jobCleanUpPolicy: 'delete' experiments: - - name: ebs-loss + - name: ebs-loss-by-tag spec: components: env: # set chaos duration (in sec) as desired - name: TOTAL_CHAOS_DURATION - value: '60' + value: '30' - # Instance ID of the target ec2 instance - - name: EC2_INSTANCE_ID - value: '' + - name: CHAOS_INTERVAL + value: '30' - # provide EBS volume id attached to the given instance - - name: EBS_VOL_ID + # provide EBS volume tag attached to the given instance + # it'll be in form of key:value (ex: 'team:devops') + - name: EBS_VOLUME_TAG value: '' - - # Enter the device name which you wanted to mount only for AWS. - - name: DEVICE_NAME - value: '/dev/sdb' # provide the region name of the instance - name: REGION - value: '' \ No newline at end of file + value: '' diff --git a/charts/kube-aws/ebs-loss-by-tag/experiment.yaml b/charts/kube-aws/ebs-loss-by-tag/experiment.yaml new file mode 100644 index 0000000..4fb2adf --- /dev/null +++ b/charts/kube-aws/ebs-loss-by-tag/experiment.yaml @@ -0,0 +1,83 @@ +apiVersion: litmuschaos.io/v1alpha1 +description: + message: | + Detaching an ebs volume from ec2 instance. +kind: ChaosExperiment +metadata: + name: ebs-loss-by-tag + labels: + name: ebs-loss-by-tag + app.kubernetes.io/part-of: litmus + app.kubernetes.io/component: chaosexperiment + app.kubernetes.io/version: latest +spec: + definition: + scope: Cluster + permissions: + - apiGroups: + - "" + - "batch" + - "litmuschaos.io" + resources: + - "jobs" + - "pods" + - "events" + - "pods/log" + - "pods/exec" + - "secrets" + - "chaosengines" + - "chaosexperiments" + - "chaosresults" + verbs: + - "create" + - "list" + - "get" + - "patch" + - "update" + - "delete" + image: "litmuschaos/go-runner:latest" + imagePullPolicy: Always + args: + - -c + - ./experiments -name ebs-loss-by-tag + command: + - /bin/bash + env: + - name: TOTAL_CHAOS_DURATION + value: '30' + + - name: CHAOS_INTERVAL + value: '30' + + - name: RAMP_TIME + value: '' + + - name: EBS_VOLUME_TAG + value: '' + + - name: REGION + value: '' + + - name: SEQUENCE + value: 'parallel' + + - name: VOLUME_AFFECTED_PERC + value: '' + + # Provide the path of aws credentials mounted from secret + - name: AWS_SHARED_CREDENTIALS_FILE + value: '/tmp/cloud_config.yml' + + # provide the LIB + # only litmus supported + - name: LIB + value: 'litmus' + + labels: + name: ebs-loss-by-tag + app.kubernetes.io/part-of: litmus + app.kubernetes.io/component: experiment-job + app.kubernetes.io/version: latest + secrets: + - name: cloud-secret + mountPath: /tmp/ diff --git a/charts/kube-aws/ebs-loss-by-tag/rbac.yaml b/charts/kube-aws/ebs-loss-by-tag/rbac.yaml new file mode 100644 index 0000000..9690e37 --- /dev/null +++ b/charts/kube-aws/ebs-loss-by-tag/rbac.yaml @@ -0,0 +1,46 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: ebs-loss-by-tag-sa + namespace: default + labels: + name: ebs-loss-by-tag-sa + app.kubernetes.io/part-of: litmus +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: ebs-loss-by-tag-sa + labels: + name: ebs-loss-by-tag-sa + app.kubernetes.io/part-of: litmus +rules: +- apiGroups: [""] + resources: ["pods","events","secrets"] + verbs: ["create","list","get","patch","update","delete","deletecollection"] +- apiGroups: [""] + resources: ["pods/exec","pods/log"] + verbs: ["create","list","get"] +- apiGroups: ["batch"] + resources: ["jobs"] + verbs: ["create","list","get","delete","deletecollection"] +- apiGroups: ["litmuschaos.io"] + resources: ["chaosengines","chaosexperiments","chaosresults"] + verbs: ["create","list","get","patch","update"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: ebs-loss-by-tag-sa + labels: + name: ebs-loss-by-tag-sa + app.kubernetes.io/part-of: litmus +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: ebs-loss-by-tag-sa +subjects: +- kind: ServiceAccount + name: ebs-loss-by-tag-sa + namespace: default diff --git a/charts/kube-aws/ec2-terminate-by-tag/engine.yaml b/charts/kube-aws/ec2-terminate-by-tag/engine.yaml index a7f61b2..b5ff35d 100644 --- a/charts/kube-aws/ec2-terminate-by-tag/engine.yaml +++ b/charts/kube-aws/ec2-terminate-by-tag/engine.yaml @@ -32,4 +32,4 @@ spec: # enable it if the target instance is a part of self-managed nodegroup. - name: MANAGED_NODEGROUP - value: 'disable' \ No newline at end of file + value: 'disable' diff --git a/charts/kube-aws/ec2-terminate-by-tag/experiment.yaml b/charts/kube-aws/ec2-terminate-by-tag/experiment.yaml index 02b07b3..ba2157e 100644 --- a/charts/kube-aws/ec2-terminate-by-tag/experiment.yaml +++ b/charts/kube-aws/ec2-terminate-by-tag/experiment.yaml @@ -53,6 +53,9 @@ spec: - name: RAMP_TIME value: '' + - name: INSTANCE_TAG + value: '' + # enable it if the target instance is a part of self-managed nodegroup. - name: MANAGED_NODEGROUP value: 'disable' diff --git a/charts/kube-aws/icons/ebs-loss.png b/charts/kube-aws/icons/ebs-loss-by-id.png similarity index 100% rename from charts/kube-aws/icons/ebs-loss.png rename to charts/kube-aws/icons/ebs-loss-by-id.png diff --git a/charts/kube-aws/icons/ebs-loss-by-tag.png b/charts/kube-aws/icons/ebs-loss-by-tag.png new file mode 100644 index 0000000000000000000000000000000000000000..fd09e34f6cd5c49336db1bb357ebf14d82201274 GIT binary patch literal 3152 zcmV-W46pNvP)jCR+=d*`L+4czA#!(zllHgrc<0?fHf|Fh(o*wV0m%zf(KebGfH6AH;z62kK%;Gf<*SG zoGeJ~@lM*YtwDKSy0m~MPs<_;@+d6u7+I+Ma^dhOG9ovHN|#Nbc@N}~g=m6+x5)zN z2`6JUA!9D!{tqtDj;)P!sjV-h^Qhb7YH$^~Q=fv+S;nj3mF#S29^m+Ka_bzGE~=})MkhY&Cb#>R&+FCy z8XTS2$0jR*1)Cla()K`#lG1n*b+wSSHJwakiwP(X!C(mx&>yh4>O-A$_-Gdei<60s z4OaR1ck}#OB!Gypx{5c>47T+|rxN+iUMy|+WL=E1h8t@TuZ@pdSfVuARDn;X>v+P#f-xo-|w4Z10; z#?6jZY`>`4U6YcAP(JIXb>091kjmh=^PF#BfF%OQ>?|c}?`Qk?T&J^dpqtAA!UrN_ zNE>GS@=Xy??!Fj;@y2Cl+(9`xLzSSwtp;Mq;vrr6)*>4dFU9K<2L(hT?U<9LoDac7 z>jF4dclMeRfH=i>4~mA!n?GT=>PJS(GjnbZ8O4+?jK+xAgmk|Zdz zPXR$|{?_eQ7kn~=;a4~!@){v`1K1bQ^R@W}!<3wmgSLk{nI&ULKsgoAoBWoeXlD8y zs{L6k544X7zD5Vplas=0IudFT6c&tNXe8n=h+L?pq1q5`@!^gVl#DDdZ z=SaeHN`L@^p&hTxAc!EL77MKK<>4+~GEG1+eR*$JYe2t-Zib6OL{3-Ink1#Fa?(%N zh8T~t)CGxl7qhN*RzPTO=~ERFWbhiqRMH)9u>xXMe{fN_maEYh@aQM)s(qvgKpA%3 z_KXlRyuxI9(+zQ$h4-P5AkO(ZTl}XK5Ch^VLX7nc?a*CC@Oh{wwxWE-qCd{T_oJ*f z*w%Eara=J_R037c^$6brCI45oqlHZyj#j!c5?sx5*a$(iOjyPbmL@4>dH71XyCXmR zHygrI3RZ|B z0xU_6%CJu4d#DwP;C=A15MM010=(a!cmQpbljm@)4}>ismSQ-hg*;dxP{k(J^~kj) z`PBYkK@d^)eGf14RErS+#DW1tM^QnmI1y+>gV{NG6~jVy9i>Zyn|Id2&`4zI4~u-} z8!BF}^V=n0QB$QUNx2&;!NqGy2sZQPWchtR9~b+>vw*WvbqvwCbXfrz!SKoitOj`T znL|om$U&;G{*Bpwmr(Gf8+yR%ctY$i6%vaIx@}}*_VufesJbr1d-1n3bytD~i{WYv z8nCKdy~G+~ZYr%4t$;^P*FiEXrSB9oMU`O4wyEvj+F>Aq(<#!>4LwY0_uc3uCO3gw<-fG zga70K1;IqGaLPf@kW&`V3a#*ihKy-TJHXRxrqBz|TvZK|5LB>QG+(1qBj$ecOxqQq z>n02S5CZaq964g4PBo^vzFRYBpzE56X%+|&Jm8p9r5XQ?YmY0ATt-Yq98#oJMi1Ui z?50R-xX;s@|G;-`EI+PpTbieB!7Qx{1ycnCaLiAyzFTz+J_tcYhIe0d%|L;G12M&1 z5=9Fce3$I^p8Dw&Q-X$!=>mcob8VVIWt%ioL8OJx)0znP2a2dX_{hQ|Xvl>QGlPaq zL>HN_fBuNiqx=?!Ucgu?A{0%@^BJ?ZPmJI6e%KNft*$ArmH5i z0oF2e3o#-d5XFPvlg0A{jY5hf5fu=@1R{z-1xYr7ijgX?3?FHzzS|o#BH{N$qVkV6 zSZ2FG*Q48c?nJxEw(Evds8sdSd2ngVd^k(hM1m9uiNFxwY6A&O5 zlY@$x;Ir`^(Zn+UaQ#IksuuWVBrc#q;sP2ZE}%iot?d}#XTN-f8XBAF`i&d(*y2TW zwY!H#=Z&P&#Sc>1if3u%lgnt%*Jse;CClm8FaMm@Z+J~PFUK~5e)q~t6e}zv;4jwv zn1&A@MyKl<=qGE|(yv}xO_jUer@7ylMdvTH(!Tu%$u=UJ(%E}z&zx1ng^;nvGF`ah zol1J*sa5ocKmC<%Fe{us^)CAKNDZ4Wu2rnBuD+2yKTQvo%xCpL2le*$(SnDT&>y$H zL$SmX0@j>3MF$QZrnfh5q!r))o^mWHX()ZAU>v<$`45_UR}rNoC)1AIRW#o*Td~5| ze)BR_Y+)O>a`m`HR%w@2S)*y#HR>^!vAHQqe^E zYVj2M_`s)1*ZsKq5bb*ZL(0y|q?maIqlTElBWBomw=-w?9 z3#<`D(#I3+`6ioXdYkChjo{8nVN;-^9IR$v&P=m~Vg)P^H(wk_u?E5&TTj%mot2Yw ziSn35W*0N-%4Drf#C=NHEYxM99yU?mewa ztb&V)Ci;x`%>7<+Nk-gyO%KG9`cCmzT$a|4S!DX-u8GO#R-S; zLs$g+h&_3g;)Kd3+*3M!8|3i7ZBy?XxDB%RrqakG;+E(iq