diff --git a/examples/manifests/zarf.yaml b/examples/manifests/zarf.yaml index 7855f0a02b..6c97e00abd 100644 --- a/examples/manifests/zarf.yaml +++ b/examples/manifests/zarf.yaml @@ -39,7 +39,7 @@ components: kustomizations: # kustomizations can be specified relative to the `zarf.yaml` or as remoteBuild resources with the # following syntax: https://github.com/kubernetes-sigs/kustomize/blob/master/examples/remoteBuild.md: - - github.com/stefanprodan/podinfo//kustomize?ref=6.4.0 + - https://github.com/stefanprodan/podinfo//kustomize?ref=6.4.0 # while ?ref= is not a requirement, it is recommended to use a specific commit hash / git tag to # ensure that the kustomization is not changed in a way that breaks your deployment. # image discovery is supported in all manifests and charts using: diff --git a/site/src/content/docs/commands/zarf_package_create.md b/site/src/content/docs/commands/zarf_package_create.md index 7fe3f104ae..d9eb0b9d51 100644 --- a/site/src/content/docs/commands/zarf_package_create.md +++ b/site/src/content/docs/commands/zarf_package_create.md @@ -31,7 +31,6 @@ zarf package create [ DIRECTORY ] [flags] -o, --output string Specify the output (either a directory or an oci:// URL) for the created Zarf package --registry-override stringToString Specify a map of domains to override on package create when pulling images (e.g. --registry-override docker.io=dockerio-reg.enterprise.intranet) (default []) --retries int Number of retries to perform for Zarf deploy operations like git/image pushes or Helm installs (default 3) - -s, --sbom View SBOM contents after creating the package --sbom-out string Specify an output directory for the SBOMs from the created Zarf package --set stringToString Specify package variables to set on the command line (KEY=value) (default []) --signing-key string Path to private key file for signing packages diff --git a/src/cmd/package.go b/src/cmd/package.go index 5ab1f4e2b9..8bdf8d506a 100644 --- a/src/cmd/package.go +++ b/src/cmd/package.go @@ -28,7 +28,6 @@ import ( "github.com/zarf-dev/zarf/src/internal/dns" "github.com/zarf-dev/zarf/src/internal/packager2" "github.com/zarf-dev/zarf/src/pkg/cluster" - "github.com/zarf-dev/zarf/src/pkg/lint" "github.com/zarf-dev/zarf/src/pkg/message" "github.com/zarf-dev/zarf/src/pkg/packager" "github.com/zarf-dev/zarf/src/pkg/packager/filters" @@ -65,24 +64,22 @@ var packageCreateCmd = &cobra.Command{ pkgConfig.CreateOpts.SetVariables = helpers.TransformAndMergeMap( v.GetStringMapString(common.VPkgCreateSet), pkgConfig.CreateOpts.SetVariables, strings.ToUpper) - pkgClient, err := packager.New(&pkgConfig, - packager.WithContext(ctx), - ) + opt := packager2.CreateOptions{ + Flavor: pkgConfig.CreateOpts.Flavor, + RegistryOverrides: pkgConfig.CreateOpts.RegistryOverrides, + SigningKeyPath: pkgConfig.CreateOpts.SigningKeyPath, + SigningKeyPassword: pkgConfig.CreateOpts.SigningKeyPassword, + SetVariables: pkgConfig.CreateOpts.SetVariables, + MaxPackageSizeMB: pkgConfig.CreateOpts.MaxPackageSizeMB, + SBOMOut: pkgConfig.CreateOpts.SBOMOutputDir, + SkipSBOM: pkgConfig.CreateOpts.SkipSBOM, + Output: pkgConfig.CreateOpts.Output, + DifferentialPackagePath: pkgConfig.CreateOpts.DifferentialPackagePath, + } + err := packager2.Create(cmd.Context(), pkgConfig.CreateOpts.BaseDir, opt) if err != nil { return err } - defer pkgClient.ClearTempPaths() - - err = pkgClient.Create(ctx) - - // NOTE(mkcp): LintErrors are rendered with a table - var lintErr *lint.LintError - if errors.As(err, &lintErr) { - common.PrintFindings(ctx, lintErr) - } - if err != nil { - return fmt.Errorf("failed to create package: %w", err) - } return nil }, } @@ -511,7 +508,6 @@ func bindCreateFlags(v *viper.Viper) { createFlags.StringVar(&pkgConfig.CreateOpts.DifferentialPackagePath, "differential", v.GetString(common.VPkgCreateDifferential), lang.CmdPackageCreateFlagDifferential) createFlags.StringToStringVar(&pkgConfig.CreateOpts.SetVariables, "set", v.GetStringMapString(common.VPkgCreateSet), lang.CmdPackageCreateFlagSet) - createFlags.BoolVarP(&pkgConfig.CreateOpts.ViewSBOM, "sbom", "s", v.GetBool(common.VPkgCreateSbom), lang.CmdPackageCreateFlagSbom) createFlags.StringVar(&pkgConfig.CreateOpts.SBOMOutputDir, "sbom-out", v.GetString(common.VPkgCreateSbomOutput), lang.CmdPackageCreateFlagSbomOut) createFlags.BoolVar(&pkgConfig.CreateOpts.SkipSBOM, "skip-sbom", v.GetBool(common.VPkgCreateSkipSbom), lang.CmdPackageCreateFlagSkipSbom) createFlags.IntVarP(&pkgConfig.CreateOpts.MaxPackageSizeMB, "max-package-size", "m", v.GetInt(common.VPkgCreateMaxPackageSize), lang.CmdPackageCreateFlagMaxPackageSize) diff --git a/src/internal/packager2/actions/actions.go b/src/internal/packager2/actions/actions.go new file mode 100644 index 0000000000..8090e981b3 --- /dev/null +++ b/src/internal/packager2/actions/actions.go @@ -0,0 +1,304 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package actions contains functions for running component actions within Zarf packages. +package actions + +import ( + "context" + "fmt" + "path/filepath" + "regexp" + "runtime" + "strings" + "time" + + "github.com/defenseunicorns/pkg/helpers/v2" + "github.com/zarf-dev/zarf/src/api/v1alpha1" + "github.com/zarf-dev/zarf/src/internal/packager/template" + "github.com/zarf-dev/zarf/src/pkg/message" + "github.com/zarf-dev/zarf/src/pkg/utils" + "github.com/zarf-dev/zarf/src/pkg/utils/exec" + "github.com/zarf-dev/zarf/src/pkg/variables" +) + +// Run runs all provided actions. +func Run(ctx context.Context, basePath string, defaultCfg v1alpha1.ZarfComponentActionDefaults, actions []v1alpha1.ZarfComponentAction, variableConfig *variables.VariableConfig) error { + if variableConfig == nil { + variableConfig = template.GetZarfVariableConfig(ctx) + } + + for _, a := range actions { + if err := runAction(ctx, basePath, defaultCfg, a, variableConfig); err != nil { + return err + } + } + return nil +} + +// Run commands that a component has provided. +func runAction(ctx context.Context, basePath string, defaultCfg v1alpha1.ZarfComponentActionDefaults, action v1alpha1.ZarfComponentAction, variableConfig *variables.VariableConfig) error { + var ( + cmdEscaped string + out string + err error + + cmd = action.Cmd + ) + + // If the action is a wait, convert it to a command. + if action.Wait != nil { + // If the wait has no timeout, set a default of 5 minutes. + if action.MaxTotalSeconds == nil { + fiveMin := 300 + action.MaxTotalSeconds = &fiveMin + } + + // Convert the wait to a command. + if cmd, err = convertWaitToCmd(ctx, *action.Wait, action.MaxTotalSeconds); err != nil { + return err + } + + // Mute the output because it will be noisy. + t := true + action.Mute = &t + + // Set the max retries to 0. + z := 0 + action.MaxRetries = &z + + // Not used for wait actions. + d := "" + action.Dir = &d + action.Env = []string{} + action.SetVariables = []v1alpha1.Variable{} + } + + if action.Description != "" { + cmdEscaped = action.Description + } else { + cmdEscaped = helpers.Truncate(cmd, 60, false) + } + + spinner := message.NewProgressSpinner("Running \"%s\"", cmdEscaped) + // Persist the spinner output so it doesn't get overwritten by the command output. + spinner.EnablePreserveWrites() + + actionDefaults := actionGetCfg(ctx, defaultCfg, action, variableConfig.GetAllTemplates()) + actionDefaults.Dir = filepath.Join(basePath, actionDefaults.Dir) + + if cmd, err = actionCmdMutation(ctx, cmd, actionDefaults.Shell); err != nil { + spinner.Errorf(err, "Error mutating command: %s", cmdEscaped) + } + + duration := time.Duration(actionDefaults.MaxTotalSeconds) * time.Second + timeout := time.After(duration) + + // Keep trying until the max retries is reached. + // TODO: Refactor using go-retry +retryCmd: + for remaining := actionDefaults.MaxRetries + 1; remaining > 0; remaining-- { + // Perform the action run. + tryCmd := func(ctx context.Context) error { + // Try running the command and continue the retry loop if it fails. + if out, err = actionRun(ctx, actionDefaults, cmd, actionDefaults.Shell, spinner); err != nil { + return err + } + + out = strings.TrimSpace(out) + + // If an output variable is defined, set it. + for _, v := range action.SetVariables { + variableConfig.SetVariable(v.Name, out, v.Sensitive, v.AutoIndent, v.Type) + if err := variableConfig.CheckVariablePattern(v.Name, v.Pattern); err != nil { + return err + } + } + + // If the action has a wait, change the spinner message to reflect that on success. + if action.Wait != nil { + spinner.Successf("Wait for \"%s\" succeeded", cmdEscaped) + } else { + spinner.Successf("Completed \"%s\"", cmdEscaped) + } + + // If the command ran successfully, continue to the next action. + return nil + } + + // If no timeout is set, run the command and return or continue retrying. + if actionDefaults.MaxTotalSeconds < 1 { + spinner.Updatef("Waiting for \"%s\" (no timeout)", cmdEscaped) + //TODO (schristoff): Make it so tryCmd can take a normal ctx + if err := tryCmd(context.Background()); err != nil { + continue retryCmd + } + + return nil + } + + // Run the command on repeat until success or timeout. + spinner.Updatef("Waiting for \"%s\" (timeout: %ds)", cmdEscaped, actionDefaults.MaxTotalSeconds) + select { + // On timeout break the loop to abort. + case <-timeout: + break retryCmd + + // Otherwise, try running the command. + default: + ctx, cancel := context.WithTimeout(ctx, duration) + defer cancel() + if err := tryCmd(ctx); err != nil { + continue retryCmd + } + + return nil + } + } + + select { + case <-timeout: + // If we reached this point, the timeout was reached or command failed with no retries. + if actionDefaults.MaxTotalSeconds < 1 { + return fmt.Errorf("command %q failed after %d retries", cmdEscaped, actionDefaults.MaxRetries) + } else { + return fmt.Errorf("command %q timed out after %d seconds", cmdEscaped, actionDefaults.MaxTotalSeconds) + } + default: + // If we reached this point, the retry limit was reached. + return fmt.Errorf("command %q failed after %d retries", cmdEscaped, actionDefaults.MaxRetries) + } +} + +// convertWaitToCmd will return the wait command if it exists, otherwise it will return the original command. +func convertWaitToCmd(_ context.Context, wait v1alpha1.ZarfComponentActionWait, timeout *int) (string, error) { + // Build the timeout string. + timeoutString := fmt.Sprintf("--timeout %ds", *timeout) + + // If the action has a wait, build a cmd from that instead. + cluster := wait.Cluster + if cluster != nil { + ns := cluster.Namespace + if ns != "" { + ns = fmt.Sprintf("-n %s", ns) + } + + // Build a call to the zarf tools wait-for command. + return fmt.Sprintf("./zarf tools wait-for %s %s %s %s %s", + cluster.Kind, cluster.Name, cluster.Condition, ns, timeoutString), nil + } + + network := wait.Network + if network != nil { + // Make sure the protocol is lower case. + network.Protocol = strings.ToLower(network.Protocol) + + // If the protocol is http and no code is set, default to 200. + if strings.HasPrefix(network.Protocol, "http") && network.Code == 0 { + network.Code = 200 + } + + // Build a call to the zarf tools wait-for command. + return fmt.Sprintf("./zarf tools wait-for %s %s %d %s", + network.Protocol, network.Address, network.Code, timeoutString), nil + } + + return "", fmt.Errorf("wait action is missing a cluster or network") +} + +// Perform some basic string mutations to make commands more useful. +func actionCmdMutation(_ context.Context, cmd string, shellPref v1alpha1.Shell) (string, error) { + zarfCommand, err := utils.GetFinalExecutableCommand() + if err != nil { + return cmd, err + } + + // Try to patch the zarf binary path in case the name isn't exactly "./zarf". + cmd = strings.ReplaceAll(cmd, "./zarf ", zarfCommand+" ") + + // Make commands 'more' compatible with Windows OS PowerShell + if runtime.GOOS == "windows" && (exec.IsPowershell(shellPref.Windows) || shellPref.Windows == "") { + // Replace "touch" with "New-Item" on Windows as it's a common command, but not POSIX so not aliased by M$. + // See https://mathieubuisson.github.io/powershell-linux-bash/ & + // http://web.cs.ucla.edu/~miryung/teaching/EE461L-Spring2012/labs/posix.html for more details. + cmd = regexp.MustCompile(`^touch `).ReplaceAllString(cmd, `New-Item `) + + // Convert any ${ZARF_VAR_*} or $ZARF_VAR_* to ${env:ZARF_VAR_*} or $env:ZARF_VAR_* respectively (also TF_VAR_*). + // https://regex101.com/r/xk1rkw/1 + envVarRegex := regexp.MustCompile(`(?P\${?(?P(ZARF|TF)_VAR_([a-zA-Z0-9_-])+)}?)`) + get, err := helpers.MatchRegex(envVarRegex, cmd) + if err == nil { + newCmd := strings.ReplaceAll(cmd, get("envIndicator"), fmt.Sprintf("$Env:%s", get("varName"))) + message.Debugf("Converted command \"%s\" to \"%s\" t", cmd, newCmd) + cmd = newCmd + } + } + + return cmd, nil +} + +// Merge the ActionSet defaults with the action config. +func actionGetCfg(_ context.Context, cfg v1alpha1.ZarfComponentActionDefaults, a v1alpha1.ZarfComponentAction, vars map[string]*variables.TextTemplate) v1alpha1.ZarfComponentActionDefaults { + if a.Mute != nil { + cfg.Mute = *a.Mute + } + + // Default is no timeout, but add a timeout if one is provided. + if a.MaxTotalSeconds != nil { + cfg.MaxTotalSeconds = *a.MaxTotalSeconds + } + + if a.MaxRetries != nil { + cfg.MaxRetries = *a.MaxRetries + } + + if a.Dir != nil { + cfg.Dir = *a.Dir + } + + if len(a.Env) > 0 { + cfg.Env = append(cfg.Env, a.Env...) + } + + if a.Shell != nil { + cfg.Shell = *a.Shell + } + + // Add variables to the environment. + for k, v := range vars { + // Remove # from env variable name. + k = strings.ReplaceAll(k, "#", "") + // Make terraform variables available to the action as TF_VAR_lowercase_name. + k1 := strings.ReplaceAll(strings.ToLower(k), "zarf_var", "TF_VAR") + cfg.Env = append(cfg.Env, fmt.Sprintf("%s=%s", k, v.Value)) + cfg.Env = append(cfg.Env, fmt.Sprintf("%s=%s", k1, v.Value)) + } + + return cfg +} + +func actionRun(ctx context.Context, cfg v1alpha1.ZarfComponentActionDefaults, cmd string, shellPref v1alpha1.Shell, spinner *message.Spinner) (string, error) { + shell, shellArgs := exec.GetOSShell(shellPref) + + message.Debugf("Running command in %s: %s", shell, cmd) + + execCfg := exec.Config{ + Env: cfg.Env, + Dir: cfg.Dir, + } + + fmt.Println("exec cfg", execCfg.Dir) + + if !cfg.Mute { + execCfg.Stdout = spinner + execCfg.Stderr = spinner + } + + out, errOut, err := exec.CmdWithContext(ctx, execCfg, shell, append(shellArgs, cmd)...) + // Dump final complete output (respect mute to prevent sensitive values from hitting the logs). + if !cfg.Mute { + message.Debug(cmd, out, errOut) + } + + return out, err +} diff --git a/src/internal/packager2/create.go b/src/internal/packager2/create.go new file mode 100644 index 0000000000..f28b594cb6 --- /dev/null +++ b/src/internal/packager2/create.go @@ -0,0 +1,72 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +package packager2 + +import ( + "context" + + "github.com/defenseunicorns/pkg/helpers/v2" + "github.com/defenseunicorns/pkg/oci" + + "github.com/zarf-dev/zarf/src/config" + layout2 "github.com/zarf-dev/zarf/src/internal/packager2/layout" +) + +type CreateOptions struct { + Flavor string + RegistryOverrides map[string]string + SigningKeyPath string + SigningKeyPassword string + SetVariables map[string]string + MaxPackageSizeMB int + SBOMOut string + SkipSBOM bool + Output string + DifferentialPackagePath string +} + +func Create(ctx context.Context, packagePath string, opt CreateOptions) error { + createOpt := layout2.CreateOptions{ + Flavor: opt.Flavor, + RegistryOverrides: opt.RegistryOverrides, + SigningKeyPath: opt.SigningKeyPath, + SigningKeyPassword: opt.SigningKeyPassword, + SetVariables: opt.SetVariables, + SkipSBOM: opt.SkipSBOM, + DifferentialPackagePath: opt.DifferentialPackagePath, + } + pkgLayout, err := layout2.CreatePackage(ctx, packagePath, createOpt) + if err != nil { + return err + } + defer pkgLayout.Cleanup() + + if helpers.IsOCIURL(opt.Output) { + ref, err := layout2.ReferenceFromMetadata(opt.Output, pkgLayout.Pkg) + if err != nil { + return err + } + remote, err := layout2.NewRemote(ctx, ref, oci.PlatformForArch(config.GetArch())) + if err != nil { + return err + } + err = remote.Push(ctx, pkgLayout, config.CommonOptions.OCIConcurrency) + if err != nil { + return err + } + } else { + err = pkgLayout.Archive(opt.Output, opt.MaxPackageSizeMB) + if err != nil { + return err + } + } + + if opt.SBOMOut != "" { + _, err := pkgLayout.GetSBOM(opt.SBOMOut) + if err != nil { + return err + } + } + return nil +} diff --git a/src/internal/packager2/filters/deploy.go b/src/internal/packager2/filters/deploy.go new file mode 100644 index 0000000000..4b562d1c92 --- /dev/null +++ b/src/internal/packager2/filters/deploy.go @@ -0,0 +1,189 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "fmt" + "slices" + "strings" + + "github.com/agnivade/levenshtein" + "github.com/defenseunicorns/pkg/helpers/v2" + "github.com/zarf-dev/zarf/src/api/v1alpha1" + "github.com/zarf-dev/zarf/src/pkg/interactive" +) + +// ForDeploy creates a new deployment filter. +func ForDeploy(optionalComponents string, isInteractive bool) ComponentFilterStrategy { + requested := helpers.StringToSlice(optionalComponents) + + return &deploymentFilter{ + requested, + isInteractive, + } +} + +// deploymentFilter is the default filter for deployments. +type deploymentFilter struct { + requestedComponents []string + isInteractive bool +} + +// Errors for the deployment filter. +var ( + ErrMultipleSameGroup = fmt.Errorf("cannot specify multiple components from the same group") + ErrNoDefaultOrSelection = fmt.Errorf("no default or selected component found") + ErrNotFound = fmt.Errorf("no compatible components found") + ErrSelectionCanceled = fmt.Errorf("selection canceled") +) + +// Apply applies the filter. +func (f *deploymentFilter) Apply(pkg v1alpha1.ZarfPackage) ([]v1alpha1.ZarfComponent, error) { + var selectedComponents []v1alpha1.ZarfComponent + groupedComponents := map[string][]v1alpha1.ZarfComponent{} + orderedComponentGroups := []string{} + + // Group the components by Name and Group while maintaining order + for _, component := range pkg.Components { + groupKey := component.Name + if component.DeprecatedGroup != "" { + groupKey = component.DeprecatedGroup + } + + if !slices.Contains(orderedComponentGroups, groupKey) { + orderedComponentGroups = append(orderedComponentGroups, groupKey) + } + + groupedComponents[groupKey] = append(groupedComponents[groupKey], component) + } + + isPartial := len(f.requestedComponents) > 0 && f.requestedComponents[0] != "" + + if isPartial { + matchedRequests := map[string]bool{} + + // NOTE: This does not use forIncludedComponents as it takes group, default and required status into account. + for _, groupKey := range orderedComponentGroups { + var groupDefault *v1alpha1.ZarfComponent + var groupSelected *v1alpha1.ZarfComponent + + for _, component := range groupedComponents[groupKey] { + // Ensure we have a local version of the component to point to (otherwise the pointer might change on us) + component := component + + selectState, matchedRequest := includedOrExcluded(component.Name, f.requestedComponents) + + if !component.IsRequired() { + if selectState == excluded { + // If the component was explicitly excluded, record the match and continue + matchedRequests[matchedRequest] = true + continue + } else if selectState == unknown && component.Default && groupDefault == nil { + // If the component is default but not included or excluded, remember the default + groupDefault = &component + } + } else { + // Force the selectState to included for Required components + selectState = included + } + + if selectState == included { + // If the component was explicitly included, record the match + matchedRequests[matchedRequest] = true + + // Then check for already selected groups + if groupSelected != nil { + return nil, fmt.Errorf("%w: group: %s selected: %s, %s", ErrMultipleSameGroup, component.DeprecatedGroup, groupSelected.Name, component.Name) + } + + // Then append to the final list + selectedComponents = append(selectedComponents, component) + groupSelected = &component + } + } + + // If nothing was selected from a group, handle the default + if groupSelected == nil && groupDefault != nil { + selectedComponents = append(selectedComponents, *groupDefault) + } else if len(groupedComponents[groupKey]) > 1 && groupSelected == nil && groupDefault == nil { + // If no default component was found, give up + componentNames := []string{} + for _, component := range groupedComponents[groupKey] { + componentNames = append(componentNames, component.Name) + } + return nil, fmt.Errorf("%w: choose from %s", ErrNoDefaultOrSelection, strings.Join(componentNames, ", ")) + } + } + + // Check that we have matched against all requests + for _, requestedComponent := range f.requestedComponents { + if _, ok := matchedRequests[requestedComponent]; !ok { + closeEnough := []string{} + for _, c := range pkg.Components { + d := levenshtein.ComputeDistance(c.Name, requestedComponent) + if d <= 5 { + closeEnough = append(closeEnough, c.Name) + } + } + return nil, fmt.Errorf("%w: %s, suggestions (%s)", ErrNotFound, requestedComponent, strings.Join(closeEnough, ", ")) + } + } + } else { + for _, groupKey := range orderedComponentGroups { + group := groupedComponents[groupKey] + if len(group) > 1 { + if f.isInteractive { + component, err := interactive.SelectChoiceGroup(group) + if err != nil { + return nil, fmt.Errorf("%w: %w", ErrSelectionCanceled, err) + } + selectedComponents = append(selectedComponents, component) + } else { + foundDefault := false + componentNames := []string{} + for _, component := range group { + // If the component is default, then use it + if component.Default { + selectedComponents = append(selectedComponents, component) + foundDefault = true + break + } + // Add each component name to the list + componentNames = append(componentNames, component.Name) + } + if !foundDefault { + // If no default component was found, give up + return nil, fmt.Errorf("%w: choose from %s", ErrNoDefaultOrSelection, strings.Join(componentNames, ", ")) + } + } + } else { + component := groupedComponents[groupKey][0] + + if component.IsRequired() { + selectedComponents = append(selectedComponents, component) + continue + } + + if f.isInteractive { + selected, err := interactive.SelectOptionalComponent(component) + if err != nil { + return nil, fmt.Errorf("%w: %w", ErrSelectionCanceled, err) + } + if selected { + selectedComponents = append(selectedComponents, component) + continue + } + } + + if component.Default { + selectedComponents = append(selectedComponents, component) + continue + } + } + } + } + + return selectedComponents, nil +} diff --git a/src/internal/packager2/filters/deploy_test.go b/src/internal/packager2/filters/deploy_test.go new file mode 100644 index 0000000000..f9899de228 --- /dev/null +++ b/src/internal/packager2/filters/deploy_test.go @@ -0,0 +1,212 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "fmt" + "strings" + "testing" + + "github.com/defenseunicorns/pkg/helpers/v2" + "github.com/stretchr/testify/require" + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +func componentFromQuery(t *testing.T, q string) v1alpha1.ZarfComponent { + c := v1alpha1.ZarfComponent{ + Name: q, + } + + conditions := strings.Split(q, "&&") + for _, cond := range conditions { + cond = strings.TrimSpace(cond) + switch cond { + case "default=true": + c.Default = true + case "default=false": + c.Default = false + case "required=": + c.Required = nil + case "required=false": + c.Required = helpers.BoolPtr(false) + case "required=true": + c.Required = helpers.BoolPtr(true) + default: + if strings.HasPrefix(cond, "group=") { + c.DeprecatedGroup = cond[6:] + continue + } + if strings.HasPrefix(cond, "idx=") { + continue + } + require.FailNow(t, "unknown condition", "unknown condition %q", cond) + } + } + + return c +} + +func componentMatrix(_ *testing.T) []v1alpha1.ZarfComponent { + var components []v1alpha1.ZarfComponent + + defaultValues := []bool{true, false} + requiredValues := []interface{}{nil, true, false} + // the duplicate groups are intentional + // this is to test group membership + default filtering + groupValues := []string{"", "foo", "foo", "foo", "bar", "bar", "bar"} + + for idx, groupValue := range groupValues { + for _, defaultValue := range defaultValues { + for _, requiredValue := range requiredValues { + name := strings.Builder{} + + // per validate rules, components in groups cannot be required + if requiredValue != nil && requiredValue.(bool) == true && groupValue != "" { + continue + } + + name.WriteString(fmt.Sprintf("required=%v", requiredValue)) + + if groupValue != "" { + name.WriteString(fmt.Sprintf(" && group=%s && idx=%d && default=%t", groupValue, idx, defaultValue)) + } else if defaultValue { + name.WriteString(" && default=true") + } + + if groupValue != "" { + // if there already exists a component in this group that is default, then set the default to false + // otherwise the filter will error + defaultAlreadyExists := false + if defaultValue { + for _, c := range components { + if c.DeprecatedGroup == groupValue && c.Default { + defaultAlreadyExists = true + break + } + } + } + if defaultAlreadyExists { + defaultValue = false + } + } + + c := v1alpha1.ZarfComponent{ + Name: name.String(), + Default: defaultValue, + DeprecatedGroup: groupValue, + } + + if requiredValue != nil { + c.Required = helpers.BoolPtr(requiredValue.(bool)) + } + + components = append(components, c) + } + } + } + + return components +} + +func TestDeployFilter_Apply(t *testing.T) { + possibilities := componentMatrix(t) + + tests := map[string]struct { + pkg v1alpha1.ZarfPackage + optionalComponents string + want []v1alpha1.ZarfComponent + expectedErr error + }{ + "Test when version is less than v0.33.0 w/ no optional components selected": { + pkg: v1alpha1.ZarfPackage{ + Build: v1alpha1.ZarfBuildData{ + Version: "v0.32.0", + }, + Components: possibilities, + }, + optionalComponents: "", + want: []v1alpha1.ZarfComponent{ + componentFromQuery(t, "required= && default=true"), + componentFromQuery(t, "required=true && default=true"), + componentFromQuery(t, "required=false && default=true"), + componentFromQuery(t, "required=true"), + componentFromQuery(t, "required= && group=foo && idx=1 && default=true"), + componentFromQuery(t, "required= && group=bar && idx=4 && default=true"), + }, + }, + "Test when version is less than v0.33.0 w/ some optional components selected": { + pkg: v1alpha1.ZarfPackage{ + Build: v1alpha1.ZarfBuildData{ + Version: "v0.32.0", + }, + Components: possibilities, + }, + optionalComponents: strings.Join([]string{"required=false", "required= && group=bar && idx=5 && default=false", "-required=true"}, ","), + want: []v1alpha1.ZarfComponent{ + componentFromQuery(t, "required= && default=true"), + componentFromQuery(t, "required=true && default=true"), + componentFromQuery(t, "required=false && default=true"), + // while "required=true" was deselected, it is still required + // therefore it should be included + componentFromQuery(t, "required=true"), + componentFromQuery(t, "required=false"), + componentFromQuery(t, "required= && group=foo && idx=1 && default=true"), + componentFromQuery(t, "required= && group=bar && idx=5 && default=false"), + }, + }, + "Test failing when group has no default and no selection was made": { + pkg: v1alpha1.ZarfPackage{ + Build: v1alpha1.ZarfBuildData{ + Version: "v0.32.0", + }, + Components: []v1alpha1.ZarfComponent{ + componentFromQuery(t, "group=foo && default=false"), + componentFromQuery(t, "group=foo && default=false"), + }, + }, + optionalComponents: "", + expectedErr: ErrNoDefaultOrSelection, + }, + "Test failing when multiple are selected from the same group": { + pkg: v1alpha1.ZarfPackage{ + Build: v1alpha1.ZarfBuildData{ + Version: "v0.32.0", + }, + Components: []v1alpha1.ZarfComponent{ + componentFromQuery(t, "group=foo && default=true"), + componentFromQuery(t, "group=foo && default=false"), + }, + }, + optionalComponents: strings.Join([]string{"group=foo && default=false", "group=foo && default=true"}, ","), + expectedErr: ErrMultipleSameGroup, + }, + "Test failing when no components are found that match the query": { + pkg: v1alpha1.ZarfPackage{ + Build: v1alpha1.ZarfBuildData{ + Version: "v0.32.0", + }, + Components: possibilities, + }, + optionalComponents: "nonexistent", + expectedErr: ErrNotFound, + }, + } + + for name, tt := range tests { + t.Run(name, func(t *testing.T) { + // we do not currently support interactive mode in unit tests + isInteractive := false + filter := ForDeploy(tt.optionalComponents, isInteractive) + + result, err := filter.Apply(tt.pkg) + if tt.expectedErr != nil { + require.ErrorIs(t, err, tt.expectedErr) + } else { + require.NoError(t, err) + } + require.Equal(t, tt.want, result) + }) + } +} diff --git a/src/internal/packager2/filters/diff.go b/src/internal/packager2/filters/diff.go new file mode 100644 index 0000000000..dfc2b2f5a9 --- /dev/null +++ b/src/internal/packager2/filters/diff.go @@ -0,0 +1,65 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +package filters + +import ( + "fmt" + + "github.com/go-git/go-git/v5/plumbing" + "github.com/zarf-dev/zarf/src/api/v1alpha1" + "github.com/zarf-dev/zarf/src/internal/git" + "github.com/zarf-dev/zarf/src/pkg/transform" +) + +// ByDifferentialData filters any images and repos already present in the reference package components. +func ByDifferentialData(images map[string]bool, repos map[string]bool) ComponentFilterStrategy { + return &differentialDataFilter{ + images: images, + repos: repos, + } +} + +type differentialDataFilter struct { + images map[string]bool + repos map[string]bool +} + +func (f *differentialDataFilter) Apply(pkg v1alpha1.ZarfPackage) ([]v1alpha1.ZarfComponent, error) { + diffComponents := []v1alpha1.ZarfComponent{} + for _, component := range pkg.Components { + filteredImages := []string{} + for _, img := range component.Images { + imgRef, err := transform.ParseImageRef(img) + if err != nil { + return nil, fmt.Errorf("unable to parse image ref %s: %w", img, err) + } + imgTag := imgRef.TagOrDigest + includeImage := imgTag == ":latest" || imgTag == ":stable" || imgTag == ":nightly" + if includeImage || !f.images[img] { + filteredImages = append(filteredImages, img) + } + } + component.Images = filteredImages + + filteredRepos := []string{} + for _, repoURL := range component.Repos { + _, refPlain, err := transform.GitURLSplitRef(repoURL) + if err != nil { + return nil, err + } + var ref plumbing.ReferenceName + if refPlain != "" { + ref = git.ParseRef(refPlain) + } + includeRepo := ref == "" || (!ref.IsTag() && !plumbing.IsHash(refPlain)) + if includeRepo || !f.repos[repoURL] { + filteredRepos = append(filteredRepos, repoURL) + } + } + component.Repos = filteredRepos + + diffComponents = append(diffComponents, component) + } + return diffComponents, nil +} diff --git a/src/internal/packager2/filters/diff_test.go b/src/internal/packager2/filters/diff_test.go new file mode 100644 index 0000000000..3c686351d0 --- /dev/null +++ b/src/internal/packager2/filters/diff_test.go @@ -0,0 +1,68 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +package filters + +import ( + "testing" + + "github.com/stretchr/testify/require" + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +func TestCopyFilter(t *testing.T) { + pkg := v1alpha1.ZarfPackage{ + Components: []v1alpha1.ZarfComponent{ + { + Images: []string{ + "example.com/include-image-tag:latest", + "example.com/image-with-tag:v1", + "example.com/diff-image-with-tag:v1", + "example.com/image-with-digest@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "example.com/diff-image-with-digest@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "example.com/image-with-tag-and-digest:v1@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "example.com/diff-image-with-tag-and-digest:v1@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + }, + Repos: []string{ + "https://example.com/no-ref.git", + "https://example.com/branch.git@refs/heads/main", + "https://example.com/tag.git@v1", + "https://example.com/diff-tag.git@v1", + "https://example.com/commit.git@524980951ff16e19dc25232e9aea8fd693989ba6", + "https://example.com/diff-commit.git@524980951ff16e19dc25232e9aea8fd693989ba6", + }, + }, + }, + } + differentialImages := map[string]bool{ + "example.com/include-image-tag:latest": true, + "example.com/diff-image-with-tag:v1": true, + "example.com/diff-image-with-digest@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855": true, + "example.com/diff-image-with-tag-and-digest:v1@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855": true, + } + differentialRepos := map[string]bool{ + "https://example.com/no-ref.git": true, + "https://example.com/branch.git@refs/heads/main": true, + "https://example.com/diff-tag.git@v1": true, + "https://example.com/diff-commit.git@524980951ff16e19dc25232e9aea8fd693989ba6": true, + } + + filter := ByDifferentialData(differentialImages, differentialRepos) + diffComponents, err := filter.Apply(pkg) + require.NoError(t, err) + + expectedImages := []string{ + "example.com/include-image-tag:latest", + "example.com/image-with-tag:v1", + "example.com/image-with-digest@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "example.com/image-with-tag-and-digest:v1@sha256:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + } + require.ElementsMatch(t, expectedImages, diffComponents[0].Images) + expectedRepos := []string{ + "https://example.com/no-ref.git", + "https://example.com/branch.git@refs/heads/main", + "https://example.com/tag.git@v1", + "https://example.com/commit.git@524980951ff16e19dc25232e9aea8fd693989ba6", + } + require.ElementsMatch(t, expectedRepos, diffComponents[0].Repos) +} diff --git a/src/internal/packager2/filters/empty.go b/src/internal/packager2/filters/empty.go new file mode 100644 index 0000000000..4729adc509 --- /dev/null +++ b/src/internal/packager2/filters/empty.go @@ -0,0 +1,20 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import "github.com/zarf-dev/zarf/src/api/v1alpha1" + +// Empty returns a filter that does nothing. +func Empty() ComponentFilterStrategy { + return &emptyFilter{} +} + +// emptyFilter is a filter that does nothing. +type emptyFilter struct{} + +// Apply returns the components unchanged. +func (f *emptyFilter) Apply(pkg v1alpha1.ZarfPackage) ([]v1alpha1.ZarfComponent, error) { + return pkg.Components, nil +} diff --git a/src/internal/packager2/filters/empty_test.go b/src/internal/packager2/filters/empty_test.go new file mode 100644 index 0000000000..2b74597723 --- /dev/null +++ b/src/internal/packager2/filters/empty_test.go @@ -0,0 +1,32 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "testing" + + "github.com/stretchr/testify/require" + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +func TestEmptyFilter_Apply(t *testing.T) { + components := []v1alpha1.ZarfComponent{ + { + Name: "component1", + }, + { + Name: "component2", + }, + } + pkg := v1alpha1.ZarfPackage{ + Components: components, + } + filter := Empty() + + result, err := filter.Apply(pkg) + + require.NoError(t, err) + require.Equal(t, components, result) +} diff --git a/src/internal/packager2/filters/os.go b/src/internal/packager2/filters/os.go new file mode 100644 index 0000000000..2bc7dffa2e --- /dev/null +++ b/src/internal/packager2/filters/os.go @@ -0,0 +1,39 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "errors" + + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +// ByLocalOS creates a new filter that filters components based on local (runtime) OS. +func ByLocalOS(localOS string) ComponentFilterStrategy { + return &localOSFilter{localOS} +} + +// localOSFilter filters components based on local (runtime) OS. +type localOSFilter struct { + localOS string +} + +// ErrLocalOSRequired is returned when localOS is not set. +var ErrLocalOSRequired = errors.New("localOS is required") + +// Apply applies the filter. +func (f *localOSFilter) Apply(pkg v1alpha1.ZarfPackage) ([]v1alpha1.ZarfComponent, error) { + if f.localOS == "" { + return nil, ErrLocalOSRequired + } + + filtered := []v1alpha1.ZarfComponent{} + for _, component := range pkg.Components { + if component.Only.LocalOS == "" || component.Only.LocalOS == f.localOS { + filtered = append(filtered, component) + } + } + return filtered, nil +} diff --git a/src/internal/packager2/filters/os_test.go b/src/internal/packager2/filters/os_test.go new file mode 100644 index 0000000000..c2e022a752 --- /dev/null +++ b/src/internal/packager2/filters/os_test.go @@ -0,0 +1,39 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "testing" + + "github.com/stretchr/testify/require" + "github.com/zarf-dev/zarf/src/api/v1alpha1" + "github.com/zarf-dev/zarf/src/pkg/lint" +) + +func TestLocalOSFilter(t *testing.T) { + pkg := v1alpha1.ZarfPackage{} + for _, os := range lint.SupportedOS() { + pkg.Components = append(pkg.Components, v1alpha1.ZarfComponent{ + Only: v1alpha1.ZarfComponentOnlyTarget{ + LocalOS: os, + }, + }) + } + + for _, os := range lint.SupportedOS() { + filter := ByLocalOS(os) + result, err := filter.Apply(pkg) + if os == "" { + require.ErrorIs(t, err, ErrLocalOSRequired) + } else { + require.NoError(t, err) + } + for _, component := range result { + if component.Only.LocalOS != "" { + require.Equal(t, os, component.Only.LocalOS) + } + } + } +} diff --git a/src/internal/packager2/filters/select.go b/src/internal/packager2/filters/select.go new file mode 100644 index 0000000000..fafc8c64fa --- /dev/null +++ b/src/internal/packager2/filters/select.go @@ -0,0 +1,41 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "github.com/defenseunicorns/pkg/helpers/v2" + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +// BySelectState creates a new simple included filter. +func BySelectState(optionalComponents string) ComponentFilterStrategy { + requested := helpers.StringToSlice(optionalComponents) + + return &selectStateFilter{ + requested, + } +} + +// selectStateFilter sorts based purely on the internal included state of the component. +type selectStateFilter struct { + requestedComponents []string +} + +// Apply applies the filter. +func (f *selectStateFilter) Apply(pkg v1alpha1.ZarfPackage) ([]v1alpha1.ZarfComponent, error) { + isPartial := len(f.requestedComponents) > 0 && f.requestedComponents[0] != "" + result := []v1alpha1.ZarfComponent{} + for _, component := range pkg.Components { + selectState := included + if isPartial { + selectState, _ = includedOrExcluded(component.Name, f.requestedComponents) + } + if selectState != included { + continue + } + result = append(result, component) + } + return result, nil +} diff --git a/src/internal/packager2/filters/select_test.go b/src/internal/packager2/filters/select_test.go new file mode 100644 index 0000000000..a384ce56e8 --- /dev/null +++ b/src/internal/packager2/filters/select_test.go @@ -0,0 +1,92 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "testing" + + "github.com/stretchr/testify/require" + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +func Test_selectStateFilter_Apply(t *testing.T) { + tests := []struct { + name string + requestedComponents string + components []v1alpha1.ZarfComponent + expectedResult []v1alpha1.ZarfComponent + expectedError error + }{ + { + name: "Test when requestedComponents is empty", + requestedComponents: "", + components: []v1alpha1.ZarfComponent{ + {Name: "component1"}, + {Name: "component2"}, + {Name: "component3"}, + }, + expectedResult: []v1alpha1.ZarfComponent{ + {Name: "component1"}, + {Name: "component2"}, + {Name: "component3"}, + }, + expectedError: nil, + }, + { + name: "Test when requestedComponents contains a valid component name", + requestedComponents: "component2", + components: []v1alpha1.ZarfComponent{ + {Name: "component1"}, + {Name: "component2"}, + {Name: "component3"}, + }, + expectedResult: []v1alpha1.ZarfComponent{ + {Name: "component2"}, + }, + expectedError: nil, + }, + { + name: "Test when requestedComponents contains an excluded component name", + requestedComponents: "comp*, -component2", + components: []v1alpha1.ZarfComponent{ + {Name: "component1"}, + {Name: "component2"}, + {Name: "component3"}, + }, + expectedResult: []v1alpha1.ZarfComponent{ + {Name: "component1"}, + {Name: "component3"}, + }, + expectedError: nil, + }, + { + name: "Test when requestedComponents contains a glob pattern", + requestedComponents: "comp*", + components: []v1alpha1.ZarfComponent{ + {Name: "component1"}, + {Name: "component2"}, + {Name: "other"}, + }, + expectedResult: []v1alpha1.ZarfComponent{ + {Name: "component1"}, + {Name: "component2"}, + }, + expectedError: nil, + }, + } + + for _, tc := range tests { + t.Run(tc.name, func(t *testing.T) { + filter := BySelectState(tc.requestedComponents) + + result, err := filter.Apply(v1alpha1.ZarfPackage{ + Components: tc.components, + }) + + require.Equal(t, tc.expectedResult, result) + require.Equal(t, tc.expectedError, err) + }) + } +} diff --git a/src/internal/packager2/filters/strat.go b/src/internal/packager2/filters/strat.go new file mode 100644 index 0000000000..b63f39bd42 --- /dev/null +++ b/src/internal/packager2/filters/strat.go @@ -0,0 +1,41 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "fmt" + + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +// ComponentFilterStrategy is a strategy interface for filtering components. +type ComponentFilterStrategy interface { + Apply(v1alpha1.ZarfPackage) ([]v1alpha1.ZarfComponent, error) +} + +// comboFilter is a filter that applies a sequence of filters. +type comboFilter struct { + filters []ComponentFilterStrategy +} + +// Apply applies the filter. +func (f *comboFilter) Apply(pkg v1alpha1.ZarfPackage) ([]v1alpha1.ZarfComponent, error) { + result := pkg + + for _, filter := range f.filters { + components, err := filter.Apply(result) + if err != nil { + return nil, fmt.Errorf("error applying filter %T: %w", filter, err) + } + result.Components = components + } + + return result.Components, nil +} + +// Combine creates a new filter that applies a sequence of filters. +func Combine(filters ...ComponentFilterStrategy) ComponentFilterStrategy { + return &comboFilter{filters} +} diff --git a/src/internal/packager2/filters/strat_test.go b/src/internal/packager2/filters/strat_test.go new file mode 100644 index 0000000000..69c39beff9 --- /dev/null +++ b/src/internal/packager2/filters/strat_test.go @@ -0,0 +1,59 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "testing" + + "github.com/stretchr/testify/require" + "github.com/zarf-dev/zarf/src/api/v1alpha1" +) + +func TestCombine(t *testing.T) { + f1 := BySelectState("*a*") + f2 := BySelectState("*bar, foo") + f3 := Empty() + + combo := Combine(f1, f2, f3) + + pkg := v1alpha1.ZarfPackage{ + Components: []v1alpha1.ZarfComponent{ + { + Name: "foo", + }, + { + Name: "bar", + }, + { + Name: "baz", + }, + { + Name: "foobar", + }, + }, + } + + expected := []v1alpha1.ZarfComponent{ + { + Name: "bar", + }, + { + Name: "foobar", + }, + } + + result, err := combo.Apply(pkg) + require.NoError(t, err) + require.Equal(t, expected, result) + + // Test error propagation + combo = Combine(f1, f2, ForDeploy("group with no default", false)) + pkg.Components = append(pkg.Components, v1alpha1.ZarfComponent{ + Name: "group with no default", + DeprecatedGroup: "g1", + }) + _, err = combo.Apply(pkg) + require.Error(t, err) +} diff --git a/src/internal/packager2/filters/utils.go b/src/internal/packager2/filters/utils.go new file mode 100644 index 0000000000..3b33f9b594 --- /dev/null +++ b/src/internal/packager2/filters/utils.go @@ -0,0 +1,42 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "path" + "strings" +) + +type selectState int + +const ( + unknown selectState = iota + included + excluded +) + +func includedOrExcluded(componentName string, requestedComponentNames []string) (selectState, string) { + // Check if the component has a leading dash indicating it should be excluded - this is done first so that exclusions precede inclusions + for _, requestedComponent := range requestedComponentNames { + if strings.HasPrefix(requestedComponent, "-") { + // If the component glob matches one of the requested components, then return true + // This supports globbing with "path" in order to have the same behavior across OSes (if we ever allow namespaced components with /) + if matched, _ := path.Match(strings.TrimPrefix(requestedComponent, "-"), componentName); matched { + return excluded, requestedComponent + } + } + } + // Check if the component matches a glob pattern and should be included + for _, requestedComponent := range requestedComponentNames { + // If the component glob matches one of the requested components, then return true + // This supports globbing with "path" in order to have the same behavior across OSes (if we ever allow namespaced components with /) + if matched, _ := path.Match(requestedComponent, componentName); matched { + return included, requestedComponent + } + } + + // All other cases we don't know if we should include or exclude yet + return unknown, "" +} diff --git a/src/internal/packager2/filters/utils_test.go b/src/internal/packager2/filters/utils_test.go new file mode 100644 index 0000000000..f81b8e105f --- /dev/null +++ b/src/internal/packager2/filters/utils_test.go @@ -0,0 +1,87 @@ +// SPDX-License-Identifier: Apache-2.0 +// SPDX-FileCopyrightText: 2021-Present The Zarf Authors + +// Package filters contains core implementations of the ComponentFilterStrategy interface. +package filters + +import ( + "testing" + + "github.com/stretchr/testify/require" +) + +func Test_includedOrExcluded(t *testing.T) { + tests := []struct { + name string + componentName string + requestedComponentNames []string + wantState selectState + wantRequestedComponent string + }{ + { + name: "Test when component is excluded", + componentName: "example", + requestedComponentNames: []string{"-example"}, + wantState: excluded, + wantRequestedComponent: "-example", + }, + { + name: "Test when component is included", + componentName: "example", + requestedComponentNames: []string{"example"}, + wantState: included, + wantRequestedComponent: "example", + }, + { + name: "Test when component is not included or excluded", + componentName: "example", + requestedComponentNames: []string{"other"}, + wantState: unknown, + wantRequestedComponent: "", + }, + { + name: "Test when component is excluded and included", + componentName: "example", + requestedComponentNames: []string{"-example", "example"}, + wantState: excluded, + wantRequestedComponent: "-example", + }, + // interesting case, excluded wins + { + name: "Test when component is included and excluded", + componentName: "example", + requestedComponentNames: []string{"example", "-example"}, + wantState: excluded, + wantRequestedComponent: "-example", + }, + { + name: "Test when component is included via glob", + componentName: "example", + requestedComponentNames: []string{"ex*"}, + wantState: included, + wantRequestedComponent: "ex*", + }, + { + name: "Test when component is excluded via glob", + componentName: "example", + requestedComponentNames: []string{"-ex*"}, + wantState: excluded, + wantRequestedComponent: "-ex*", + }, + { + name: "Test when component is not found via glob", + componentName: "example", + requestedComponentNames: []string{"other*"}, + wantState: unknown, + wantRequestedComponent: "", + }, + } + + for _, tc := range tests { + t.Run(tc.name, func(t *testing.T) { + gotState, gotRequestedComponent := includedOrExcluded(tc.componentName, tc.requestedComponentNames) + require.Equal(t, tc.wantState, gotState) + require.Equal(t, tc.wantRequestedComponent, gotRequestedComponent) + }) + } +} diff --git a/src/internal/packager2/layout/create.go b/src/internal/packager2/layout/create.go index c9c0a0845c..d2d178f8c0 100644 --- a/src/internal/packager2/layout/create.go +++ b/src/internal/packager2/layout/create.go @@ -8,6 +8,8 @@ import ( "context" "crypto/sha256" "encoding/hex" + "encoding/json" + "errors" "fmt" "io" "io/fs" @@ -28,55 +30,191 @@ import ( "github.com/zarf-dev/zarf/src/api/v1alpha1" "github.com/zarf-dev/zarf/src/config" "github.com/zarf-dev/zarf/src/config/lang" + "github.com/zarf-dev/zarf/src/internal/git" "github.com/zarf-dev/zarf/src/internal/packager/helm" + "github.com/zarf-dev/zarf/src/internal/packager/images" "github.com/zarf-dev/zarf/src/internal/packager/kustomize" + actions2 "github.com/zarf-dev/zarf/src/internal/packager2/actions" + "github.com/zarf-dev/zarf/src/internal/packager2/filters" + "github.com/zarf-dev/zarf/src/pkg/interactive" "github.com/zarf-dev/zarf/src/pkg/lint" + "github.com/zarf-dev/zarf/src/pkg/message" "github.com/zarf-dev/zarf/src/pkg/packager/deprecated" + "github.com/zarf-dev/zarf/src/pkg/transform" "github.com/zarf-dev/zarf/src/pkg/utils" "github.com/zarf-dev/zarf/src/pkg/zoci" + "github.com/zarf-dev/zarf/src/types" ) // CreateOptions are the options for creating a skeleton package. type CreateOptions struct { - Flavor string - RegistryOverrides map[string]string - SigningKeyPath string - SigningKeyPassword string - SetVariables map[string]string + Flavor string + RegistryOverrides map[string]string + SigningKeyPath string + SigningKeyPassword string + SetVariables map[string]string + SkipSBOM bool + DifferentialPackagePath string } -// CreateSkeleton creates a skeleton package and returns the path to the created package. -func CreateSkeleton(ctx context.Context, packagePath string, opt CreateOptions) (string, error) { - b, err := os.ReadFile(filepath.Join(packagePath, ZarfYAML)) +func CreatePackage(ctx context.Context, packagePath string, opt CreateOptions) (*PackageLayout, error) { + buildPath, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) if err != nil { - return "", err + return nil, err } - var pkg v1alpha1.ZarfPackage - err = goyaml.Unmarshal(b, &pkg) + + pkg, err := loadPackage(ctx, packagePath, opt.Flavor, opt.SetVariables) if err != nil { - return "", err + return nil, err } - buildPath, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) + + if opt.DifferentialPackagePath != "" { + layoutOpt := PackageLayoutOptions{ + SkipSignatureValidation: true, + } + diffPkgLayout, err := LoadFromTar(ctx, opt.DifferentialPackagePath, layoutOpt) + if err != nil { + return nil, err + } + allIncludedImagesMap := map[string]bool{} + allIncludedReposMap := map[string]bool{} + for _, component := range diffPkgLayout.Pkg.Components { + for _, image := range component.Images { + allIncludedImagesMap[image] = true + } + for _, repo := range component.Repos { + allIncludedReposMap[repo] = true + } + } + + pkg.Build.Differential = true + pkg.Build.DifferentialPackageVersion = diffPkgLayout.Pkg.Metadata.Version + + versionsMatch := diffPkgLayout.Pkg.Metadata.Version == pkg.Metadata.Version + if versionsMatch { + return nil, errors.New(lang.PkgCreateErrDifferentialSameVersion) + } + noVersionSet := diffPkgLayout.Pkg.Metadata.Version == "" || pkg.Metadata.Version == "" + if noVersionSet { + return nil, errors.New(lang.PkgCreateErrDifferentialNoVersion) + } + filter := filters.ByDifferentialData(allIncludedImagesMap, allIncludedReposMap) + pkg.Components, err = filter.Apply(pkg) + if err != nil { + return nil, err + } + } + + for _, component := range pkg.Components { + err := assemblePackageComponent(ctx, component, packagePath, buildPath) + if err != nil { + return nil, err + } + } + + componentImages := []transform.Image{} + for _, component := range pkg.Components { + for _, src := range component.Images { + refInfo, err := transform.ParseImageRef(src) + if err != nil { + return nil, fmt.Errorf("failed to create ref for image %s: %w", src, err) + } + if slices.Contains(componentImages, refInfo) { + continue + } + componentImages = append(componentImages, refInfo) + } + } + sbomImageList := []transform.Image{} + if len(componentImages) > 0 { + cachePath, err := config.GetAbsCachePath() + if err != nil { + return nil, err + } + pullCfg := images.PullConfig{ + DestinationDirectory: filepath.Join(buildPath, ImagesDir), + ImageList: componentImages, + Arch: pkg.Metadata.Architecture, + RegistryOverrides: opt.RegistryOverrides, + CacheDirectory: filepath.Join(cachePath, ImagesDir), + } + pulled, err := images.Pull(ctx, pullCfg) + if err != nil { + return nil, err + } + for info, img := range pulled { + ok, err := utils.OnlyHasImageLayers(img) + if err != nil { + return nil, fmt.Errorf("failed to validate %s is an image and not an artifact: %w", info, err) + } + if ok { + sbomImageList = append(sbomImageList, info) + } + } + + // Sort images index to make build reproducible. + err = utils.SortImagesIndex(filepath.Join(buildPath, ImagesDir)) + if err != nil { + return nil, err + } + } + + if !opt.SkipSBOM { + err = generateSBOM(ctx, pkg, buildPath, sbomImageList) + if err != nil { + return nil, err + } + } + + checksumContent, checksumSha, err := getChecksum(buildPath) if err != nil { - return "", err + return nil, err + } + checksumPath := filepath.Join(buildPath, Checksums) + err = os.WriteFile(checksumPath, []byte(checksumContent), helpers.ReadWriteUser) + if err != nil { + return nil, err } + pkg.Metadata.AggregateChecksum = checksumSha - pkg.Metadata.Architecture = config.GetArch() + pkg = recordPackageMetadata(pkg, opt.Flavor, opt.RegistryOverrides) - pkg, err = resolveImports(ctx, pkg, packagePath, pkg.Metadata.Architecture, opt.Flavor) + b, err := goyaml.Marshal(pkg) if err != nil { - return "", err + return nil, err + } + err = os.WriteFile(filepath.Join(buildPath, ZarfYAML), b, helpers.ReadWriteUser) + if err != nil { + return nil, err + } + + err = signPackage(buildPath, opt.SigningKeyPath, opt.SigningKeyPassword) + if err != nil { + return nil, err } + pkgLayout, err := LoadFromDir(ctx, buildPath, PackageLayoutOptions{SkipSignatureValidation: true}) + if err != nil { + return nil, err + } + return pkgLayout, nil +} + +// CreateSkeleton creates a skeleton package and returns the path to the created package. +func CreateSkeleton(ctx context.Context, packagePath string, opt CreateOptions) (string, error) { + pkg, err := loadPackage(ctx, packagePath, opt.Flavor, nil) + if err != nil { + return "", err + } pkg.Metadata.Architecture = zoci.SkeletonArch - err = validate(pkg, packagePath, opt.SetVariables) + buildPath, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) if err != nil { return "", err } for _, component := range pkg.Components { - err := assembleComponent(component, packagePath, buildPath) + err := assembleSkeletonComponent(component, packagePath, buildPath) if err != nil { return "", err } @@ -95,7 +233,7 @@ func CreateSkeleton(ctx context.Context, packagePath string, opt CreateOptions) pkg = recordPackageMetadata(pkg, opt.Flavor, opt.RegistryOverrides) - b, err = goyaml.Marshal(pkg) + b, err := goyaml.Marshal(pkg) if err != nil { return "", err } @@ -112,6 +250,33 @@ func CreateSkeleton(ctx context.Context, packagePath string, opt CreateOptions) return buildPath, nil } +func loadPackage(ctx context.Context, packagePath, flavor string, setVariables map[string]string) (v1alpha1.ZarfPackage, error) { + b, err := os.ReadFile(filepath.Join(packagePath, ZarfYAML)) + if err != nil { + return v1alpha1.ZarfPackage{}, err + } + pkg, err := ParseZarfPackage(b) + if err != nil { + return v1alpha1.ZarfPackage{}, err + } + pkg.Metadata.Architecture = config.GetArch(pkg.Metadata.Architecture) + pkg, err = resolveImports(ctx, pkg, packagePath, pkg.Metadata.Architecture, flavor) + if err != nil { + return v1alpha1.ZarfPackage{}, err + } + if setVariables != nil { + pkg, _, err = fillActiveTemplate(ctx, pkg, setVariables) + if err != nil { + return v1alpha1.ZarfPackage{}, err + } + } + err = validate(pkg, packagePath, setVariables) + if err != nil { + return v1alpha1.ZarfPackage{}, err + } + return pkg, nil +} + func validate(pkg v1alpha1.ZarfPackage, packagePath string, setVariables map[string]string) error { err := lint.ValidatePackage(pkg) if err != nil { @@ -131,7 +296,204 @@ func validate(pkg v1alpha1.ZarfPackage, packagePath string, setVariables map[str } } -func assembleComponent(component v1alpha1.ZarfComponent, packagePath, buildPath string) error { +func assemblePackageComponent(ctx context.Context, component v1alpha1.ZarfComponent, packagePath, buildPath string) error { + tmpBuildPath, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) + if err != nil { + return err + } + defer os.RemoveAll(tmpBuildPath) + compBuildPath := filepath.Join(tmpBuildPath, component.Name) + err = os.MkdirAll(compBuildPath, 0o700) + if err != nil { + return err + } + + onCreate := component.Actions.OnCreate + if err := actions2.Run(ctx, packagePath, onCreate.Defaults, onCreate.Before, nil); err != nil { + return fmt.Errorf("unable to run component before action: %w", err) + } + + // If any helm charts are defined, process them. + for _, chart := range component.Charts { + // TODO: Refactor helm builder + if chart.LocalPath != "" { + chart.LocalPath = filepath.Join(packagePath, chart.LocalPath) + } + oldValuesFiles := chart.ValuesFiles + valuesFiles := []string{} + for _, v := range chart.ValuesFiles { + valuesFiles = append(valuesFiles, filepath.Join(packagePath, v)) + } + chart.ValuesFiles = valuesFiles + helmCfg := helm.New(chart, filepath.Join(compBuildPath, string(ChartsComponentDir)), filepath.Join(compBuildPath, string(ValuesComponentDir))) + if err := helmCfg.PackageChart(ctx, filepath.Join(compBuildPath, string(ChartsComponentDir))); err != nil { + return err + } + chart.ValuesFiles = oldValuesFiles + } + + for filesIdx, file := range component.Files { + rel := filepath.Join(string(FilesComponentDir), strconv.Itoa(filesIdx), filepath.Base(file.Target)) + dst := filepath.Join(compBuildPath, rel) + destinationDir := filepath.Dir(dst) + + if helpers.IsURL(file.Source) { + if file.ExtractPath != "" { + // get the compressedFileName from the source + compressedFileName, err := helpers.ExtractBasePathFromURL(file.Source) + if err != nil { + return fmt.Errorf(lang.ErrFileNameExtract, file.Source, err.Error()) + } + tmpDir, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) + if err != nil { + return err + } + defer os.RemoveAll(tmpBuildPath) + compressedFile := filepath.Join(tmpDir, compressedFileName) + + // If the file is an archive, download it to the componentPath.Temp + if err := utils.DownloadToFile(ctx, file.Source, compressedFile, component.DeprecatedCosignKeyPath); err != nil { + return fmt.Errorf(lang.ErrDownloading, file.Source, err.Error()) + } + err = archiver.Extract(compressedFile, file.ExtractPath, destinationDir) + if err != nil { + return fmt.Errorf(lang.ErrFileExtract, file.ExtractPath, compressedFileName, err.Error()) + } + } else { + if err := utils.DownloadToFile(ctx, file.Source, dst, component.DeprecatedCosignKeyPath); err != nil { + return fmt.Errorf(lang.ErrDownloading, file.Source, err.Error()) + } + } + } else { + if file.ExtractPath != "" { + if err := archiver.Extract(file.Source, file.ExtractPath, destinationDir); err != nil { + return fmt.Errorf(lang.ErrFileExtract, file.ExtractPath, file.Source, err.Error()) + } + } else { + if err := helpers.CreatePathAndCopy(filepath.Join(packagePath, file.Source), dst); err != nil { + return fmt.Errorf("unable to copy file %s: %w", file.Source, err) + } + } + } + + if file.ExtractPath != "" { + // Make sure dst reflects the actual file or directory. + updatedExtractedFileOrDir := filepath.Join(destinationDir, file.ExtractPath) + if updatedExtractedFileOrDir != dst { + if err := os.Rename(updatedExtractedFileOrDir, dst); err != nil { + return fmt.Errorf(lang.ErrWritingFile, dst, err) + } + } + } + + // Abort packaging on invalid shasum (if one is specified). + if file.Shasum != "" { + if err := helpers.SHAsMatch(dst, file.Shasum); err != nil { + return err + } + } + + if file.Executable || helpers.IsDir(dst) { + err := os.Chmod(dst, helpers.ReadWriteExecuteUser) + if err != nil { + return err + } + } else { + err := os.Chmod(dst, helpers.ReadWriteUser) + if err != nil { + return err + } + } + } + + for dataIdx, data := range component.DataInjections { + rel := filepath.Join(string(DataComponentDir), strconv.Itoa(dataIdx), filepath.Base(data.Target.Path)) + dst := filepath.Join(compBuildPath, rel) + + if helpers.IsURL(data.Source) { + if err := utils.DownloadToFile(ctx, data.Source, dst, component.DeprecatedCosignKeyPath); err != nil { + return fmt.Errorf(lang.ErrDownloading, data.Source, err.Error()) + } + } else { + if err := helpers.CreatePathAndCopy(filepath.Join(packagePath, data.Source), dst); err != nil { + return fmt.Errorf("unable to copy data injection %s: %s", data.Source, err.Error()) + } + } + } + + // Iterate over all manifests. + if len(component.Manifests) > 0 { + err := os.MkdirAll(filepath.Join(compBuildPath, string(ManifestsComponentDir)), 0o700) + if err != nil { + return err + } + } + for _, manifest := range component.Manifests { + for fileIdx, path := range manifest.Files { + rel := filepath.Join(string(ManifestsComponentDir), fmt.Sprintf("%s-%d.yaml", manifest.Name, fileIdx)) + dst := filepath.Join(compBuildPath, rel) + + // Copy manifests without any processing. + if helpers.IsURL(path) { + if err := utils.DownloadToFile(ctx, path, dst, component.DeprecatedCosignKeyPath); err != nil { + return fmt.Errorf(lang.ErrDownloading, path, err.Error()) + } + } else { + if err := helpers.CreatePathAndCopy(filepath.Join(packagePath, path), dst); err != nil { + return fmt.Errorf("unable to copy manifest %s: %w", path, err) + } + } + } + + for kustomizeIdx, path := range manifest.Kustomizations { + // Generate manifests from kustomizations and place in the package. + kname := fmt.Sprintf("kustomization-%s-%d.yaml", manifest.Name, kustomizeIdx) + rel := filepath.Join(string(ManifestsComponentDir), kname) + dst := filepath.Join(compBuildPath, rel) + + if !helpers.IsURL(path) { + path = filepath.Join(packagePath, path) + } + if err := kustomize.Build(path, dst, manifest.KustomizeAllowAnyDirectory); err != nil { + return fmt.Errorf("unable to build kustomization %s: %w", path, err) + } + } + } + + // Load all specified git repos. + for _, url := range component.Repos { + // Pull all the references if there is no `@` in the string. + _, err := git.Clone(ctx, filepath.Join(compBuildPath, string(RepoComponentDir)), url, false) + if err != nil { + return fmt.Errorf("unable to pull git repo %s: %w", url, err) + } + } + + if err := actions2.Run(ctx, packagePath, onCreate.Defaults, onCreate.After, nil); err != nil { + return fmt.Errorf("unable to run component after action: %w", err) + } + + // Write the tar component. + entries, err := os.ReadDir(compBuildPath) + if err != nil { + return err + } + if len(entries) == 0 { + return nil + } + tarPath := filepath.Join(buildPath, "components", fmt.Sprintf("%s.tar", component.Name)) + err = os.MkdirAll(filepath.Join(buildPath, "components"), 0o700) + if err != nil { + return err + } + err = createReproducibleTarballFromDir(compBuildPath, component.Name, tarPath, false) + if err != nil { + return err + } + return nil +} + +func assembleSkeletonComponent(component v1alpha1.ZarfComponent, packagePath, buildPath string) error { tmpBuildPath, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) if err != nil { return err @@ -280,7 +642,7 @@ func assembleComponent(component v1alpha1.ZarfComponent, packagePath, buildPath if err != nil { return err } - err = createReproducibleTarballFromDir(compBuildPath, component.Name, tarPath) + err = createReproducibleTarballFromDir(compBuildPath, component.Name, tarPath, true) if err != nil { return err } @@ -394,7 +756,7 @@ func signPackage(dirPath, signingKeyPath, signingKeyPassword string) error { return nil } -func createReproducibleTarballFromDir(dirPath, dirPrefix, tarballPath string) error { +func createReproducibleTarballFromDir(dirPath, dirPrefix, tarballPath string, overrideMode bool) error { tb, err := os.Create(tarballPath) if err != nil { return fmt.Errorf("error creating tarball: %w", err) @@ -441,7 +803,9 @@ func createReproducibleTarballFromDir(dirPath, dirPrefix, tarballPath string) er // that when unpackaged files from packages created on Windows and Linux will have the same permissions. // The &^ operator called AND NOT sets the bits to 0 in the left hand if the right hand bits are 1. // https://medium.com/learning-the-go-programming-language/bit-hacking-with-go-e0acee258827 - header.Mode = header.Mode &^ 0o077 + if overrideMode { + header.Mode = header.Mode &^ 0o077 + } // Ensure the header's name is correctly set relative to the base directory name, err := filepath.Rel(dirPath, filePath) @@ -473,3 +837,196 @@ func createReproducibleTarballFromDir(dirPath, dirPrefix, tarballPath string) er return nil }) } + +func fillActiveTemplate(ctx context.Context, pkg v1alpha1.ZarfPackage, setVariables map[string]string) (v1alpha1.ZarfPackage, []string, error) { + templateMap := map[string]string{} + warnings := []string{} + + promptAndSetTemplate := func(templatePrefix string, deprecated bool) error { + yamlTemplates, err := utils.FindYamlTemplates(&pkg, templatePrefix, "###") + if err != nil { + return err + } + + for key := range yamlTemplates { + if deprecated { + warnings = append(warnings, fmt.Sprintf(lang.PkgValidateTemplateDeprecation, key, key, key)) + } + + _, present := setVariables[key] + if !present && !config.CommonOptions.Confirm { + setVal, err := interactive.PromptVariable(ctx, v1alpha1.InteractiveVariable{ + Variable: v1alpha1.Variable{Name: key}, + }) + if err != nil { + return err + } + setVariables[key] = setVal + } else if !present { + return fmt.Errorf("template %q must be '--set' when using the '--confirm' flag", key) + } + } + + for key, value := range setVariables { + templateMap[fmt.Sprintf("%s%s###", templatePrefix, key)] = value + } + + return nil + } + + // update the component templates on the package + if err := reloadComponentTemplatesInPackage(&pkg); err != nil { + return v1alpha1.ZarfPackage{}, nil, err + } + + if err := promptAndSetTemplate(v1alpha1.ZarfPackageTemplatePrefix, false); err != nil { + return v1alpha1.ZarfPackage{}, nil, err + } + // [DEPRECATION] Set the Package Variable syntax as well for backward compatibility + if err := promptAndSetTemplate(v1alpha1.ZarfPackageVariablePrefix, true); err != nil { + return v1alpha1.ZarfPackage{}, nil, err + } + + // Add special variable for the current package architecture + templateMap[v1alpha1.ZarfPackageArch] = pkg.Metadata.Architecture + + if err := utils.ReloadYamlTemplate(&pkg, templateMap); err != nil { + return v1alpha1.ZarfPackage{}, nil, err + } + + return pkg, warnings, nil +} + +// reloadComponentTemplate appends ###ZARF_COMPONENT_NAME### for the component, assigns value, and reloads +// Any instance of ###ZARF_COMPONENT_NAME### within a component will be replaced with that components name +func reloadComponentTemplate(component *v1alpha1.ZarfComponent) error { + mappings := map[string]string{} + mappings[v1alpha1.ZarfComponentName] = component.Name + err := utils.ReloadYamlTemplate(component, mappings) + if err != nil { + return err + } + return nil +} + +// reloadComponentTemplatesInPackage appends ###ZARF_COMPONENT_NAME### for each component, assigns value, and reloads +func reloadComponentTemplatesInPackage(zarfPackage *v1alpha1.ZarfPackage) error { + // iterate through components to and find all ###ZARF_COMPONENT_NAME, assign to component Name and value + for i := range zarfPackage.Components { + if err := reloadComponentTemplate(&zarfPackage.Components[i]); err != nil { + return err + } + } + return nil +} + +func splitFile(srcPath string, chunkSize int) (err error) { + srcFile, err := os.Open(srcPath) + if err != nil { + return err + } + // Ensure we close our sourcefile, even if we error out. + defer func() { + err2 := srcFile.Close() + // Ignore if file is already closed + if !errors.Is(err2, os.ErrClosed) { + err = errors.Join(err, err2) + } + }() + + fi, err := srcFile.Stat() + if err != nil { + return err + } + + title := fmt.Sprintf("[0/%d] MB bytes written", fi.Size()/1000/1000) + progressBar := message.NewProgressBar(fi.Size(), title) + defer func(progressBar *message.ProgressBar) { + err2 := progressBar.Close() + err = errors.Join(err, err2) + }(progressBar) + + hash := sha256.New() + fileCount := 0 + // TODO(mkcp): The inside of this loop should be wrapped in a closure so we can close the destination file each + // iteration as soon as we're done writing. + for { + path := fmt.Sprintf("%s.part%03d", srcPath, fileCount+1) + dstFile, err := os.OpenFile(path, os.O_CREATE|os.O_RDWR, helpers.ReadAllWriteUser) + if err != nil { + return err + } + defer func(dstFile *os.File) { + err2 := dstFile.Close() + // Ignore if file is already closed + if !errors.Is(err2, os.ErrClosed) { + err = errors.Join(err, err2) + } + }(dstFile) + + written, copyErr := io.CopyN(dstFile, srcFile, int64(chunkSize)) + if copyErr != nil && !errors.Is(copyErr, io.EOF) { + return err + } + progressBar.Add(int(written)) + title := fmt.Sprintf("[%d/%d] MB bytes written", progressBar.GetCurrent()/1000/1000, fi.Size()/1000/1000) + progressBar.Updatef(title) + + _, err = dstFile.Seek(0, io.SeekStart) + if err != nil { + return err + } + _, err = io.Copy(hash, dstFile) + if err != nil { + return err + } + + // EOF error could be returned on 0 bytes written. + if written == 0 { + // NOTE(mkcp): We have to close the file before removing it or windows will break with a file-in-use err. + err = dstFile.Close() + if err != nil { + return err + } + err = os.Remove(path) + if err != nil { + return err + } + break + } + + fileCount++ + if errors.Is(copyErr, io.EOF) { + break + } + } + + // Remove original file + // NOTE(mkcp): We have to close the file before removing or windows can break with a file-in-use err. + err = srcFile.Close() + if err != nil { + return err + } + err = os.Remove(srcPath) + if err != nil { + return err + } + + // Write header file + data := types.ZarfSplitPackageData{ + Count: fileCount, + Bytes: fi.Size(), + Sha256Sum: fmt.Sprintf("%x", hash.Sum(nil)), + } + b, err := json.Marshal(data) + if err != nil { + return fmt.Errorf("unable to marshal the split package data: %w", err) + } + path := fmt.Sprintf("%s.part000", srcPath) + if err := os.WriteFile(path, b, helpers.ReadAllWriteUser); err != nil { + return fmt.Errorf("unable to write the file %s: %w", path, err) + } + progressBar.Successf("Package split across %d files", fileCount+1) + + return nil +} diff --git a/src/internal/packager2/layout/create_test.go b/src/internal/packager2/layout/create_test.go index 7e29bb875a..f164c39bde 100644 --- a/src/internal/packager2/layout/create_test.go +++ b/src/internal/packager2/layout/create_test.go @@ -16,7 +16,7 @@ import ( "github.com/zarf-dev/zarf/src/test/testutil" ) -func TestCreateSkeleton(t *testing.T) { +func TestCreate(t *testing.T) { t.Parallel() ctx := testutil.TestContext(t) @@ -41,6 +41,31 @@ fb7ebee94a4479bacddd71195030a483b0b0b96d4f73f7fcd2c2c8e0fce0c5c6 components/helm require.Equal(t, expectedChecksum, string(b)) } +func TestCreateSkeleton(t *testing.T) { + t.Parallel() + + ctx := testutil.TestContext(t) + + lint.ZarfSchema = testutil.LoadSchema(t, "../../../../zarf.schema.json") + + opt := CreateOptions{} + path, err := CreateSkeleton(ctx, "./testdata/zarf-skeleton-package", opt) + require.NoError(t, err) + + pkgPath := layout.New(path) + _, warnings, err := pkgPath.ReadZarfYAML() + require.NoError(t, err) + require.Empty(t, warnings) + b, err := os.ReadFile(filepath.Join(pkgPath.Base, "checksums.txt")) + require.NoError(t, err) + expectedChecksum := `54f657b43323e1ebecb0758835b8d01a0113b61b7bab0f4a8156f031128d00f9 components/data-injections.tar +879bfe82d20f7bdcd60f9e876043cc4343af4177a6ee8b2660c304a5b6c70be7 components/files.tar +c497f1a56559ea0a9664160b32e4b377df630454ded6a3787924130c02f341a6 components/manifests.tar +fb7ebee94a4479bacddd71195030a483b0b0b96d4f73f7fcd2c2c8e0fce0c5c6 components/helm-charts.tar +` + require.Equal(t, expectedChecksum, string(b)) +} + func TestGetChecksum(t *testing.T) { t.Parallel() @@ -100,7 +125,7 @@ func TestCreateReproducibleTarballFromDir(t *testing.T) { require.NoError(t, err) tarPath := filepath.Join(t.TempDir(), "data.tar") - err = createReproducibleTarballFromDir(tmpDir, "", tarPath) + err = createReproducibleTarballFromDir(tmpDir, "", tarPath, true) require.NoError(t, err) shaSum, err := helpers.GetSHA256OfFile(tarPath) diff --git a/src/internal/packager2/layout/layout.go b/src/internal/packager2/layout/layout.go index 356bb9a77f..5c1e5f3f39 100644 --- a/src/internal/packager2/layout/layout.go +++ b/src/internal/packager2/layout/layout.go @@ -47,10 +47,9 @@ func ParseZarfPackage(b []byte) (v1alpha1.ZarfPackage, error) { if err != nil { return v1alpha1.ZarfPackage{}, err } - if len(pkg.Build.Migrations) > 0 { - for idx, component := range pkg.Components { - pkg.Components[idx], _ = deprecated.MigrateComponent(pkg.Build, component) - } + // TODO (phillebaba): Figure out when migrations should actually be run. + for idx, component := range pkg.Components { + pkg.Components[idx], _ = deprecated.MigrateComponent(pkg.Build, component) } return pkg, nil } diff --git a/src/internal/packager2/layout/oci.go b/src/internal/packager2/layout/oci.go index 6ee23f43b7..da1aec3cca 100644 --- a/src/internal/packager2/layout/oci.go +++ b/src/internal/packager2/layout/oci.go @@ -55,7 +55,7 @@ func NewRemote(ctx context.Context, url string, platform ocispec.Platform, mods } // Push pushes the given package layout to the remote registry. -func (r *Remote) Push(ctx context.Context, pkgLayout PackageLayout, concurrency int) (err error) { +func (r *Remote) Push(ctx context.Context, pkgLayout *PackageLayout, concurrency int) (err error) { src, err := file.New("") if err != nil { return err @@ -103,8 +103,8 @@ func (r *Remote) Push(ctx context.Context, pkgLayout PackageLayout, concurrency return nil } -func ReferenceFromMetadata(registryLocation string, metadata *v1alpha1.ZarfMetadata, build *v1alpha1.ZarfBuildData) (string, error) { - if len(metadata.Version) == 0 { +func ReferenceFromMetadata(registryLocation string, pkg v1alpha1.ZarfPackage) (string, error) { + if len(pkg.Metadata.Version) == 0 { return "", errors.New("version is required for publishing") } if !strings.HasSuffix(registryLocation, "/") { @@ -112,9 +112,9 @@ func ReferenceFromMetadata(registryLocation string, metadata *v1alpha1.ZarfMetad } registryLocation = strings.TrimPrefix(registryLocation, helpers.OCIURLPrefix) - raw := fmt.Sprintf("%s%s:%s", registryLocation, metadata.Name, metadata.Version) - if build != nil && build.Flavor != "" { - raw = fmt.Sprintf("%s-%s", raw, build.Flavor) + raw := fmt.Sprintf("%s%s:%s", registryLocation, pkg.Metadata.Name, pkg.Metadata.Version) + if pkg.Build.Flavor != "" { + raw = fmt.Sprintf("%s-%s", raw, pkg.Build.Flavor) } ref, err := registry.ParseReference(raw) diff --git a/src/internal/packager2/layout/package.go b/src/internal/packager2/layout/package.go index 708fd19b41..a03e7e8cba 100644 --- a/src/internal/packager2/layout/package.go +++ b/src/internal/packager2/layout/package.go @@ -24,6 +24,7 @@ import ( "github.com/zarf-dev/zarf/src/api/v1alpha1" "github.com/zarf-dev/zarf/src/config" + "github.com/zarf-dev/zarf/src/pkg/packager/sources" "github.com/zarf-dev/zarf/src/pkg/transform" "github.com/zarf-dev/zarf/src/pkg/utils" ) @@ -189,6 +190,36 @@ func (p *PackageLayout) GetImage(ref transform.Image) (registryv1.Image, error) return nil, fmt.Errorf("unable to find the image %s", ref.Reference) } +func (p *PackageLayout) Archive(dirPath string, maxPackageSize int) error { + packageName := fmt.Sprintf("%s%s", sources.NameFromMetadata(&p.Pkg, false), sources.PkgSuffix(p.Pkg.Metadata.Uncompressed)) + tarballPath := filepath.Join(dirPath, packageName) + err := os.Remove(tarballPath) + if err != nil && !errors.Is(err, os.ErrNotExist) { + return err + } + err = archiver.Archive([]string{p.dirPath + string(os.PathSeparator)}, tarballPath) + if err != nil { + return fmt.Errorf("unable to create package: %w", err) + } + fi, err := os.Stat(tarballPath) + if err != nil { + return fmt.Errorf("unable to read the package archive: %w", err) + } + // Convert Megabytes to bytes. + chunkSize := maxPackageSize * 1000 * 1000 + // If a chunk size was specified and the package is larger than the chunk size, split it into chunks. + if maxPackageSize > 0 && fi.Size() > int64(chunkSize) { + if fi.Size()/int64(chunkSize) > 999 { + return fmt.Errorf("unable to split the package archive into multiple files: must be less than 1,000 files") + } + err := splitFile(tarballPath, chunkSize) + if err != nil { + return fmt.Errorf("unable to split the package archive into multiple files: %w", err) + } + } + return nil +} + // Files returns a map off all the files in the package. func (p *PackageLayout) Files() (map[string]string, error) { files := map[string]string{} diff --git a/src/internal/packager2/layout/sbom.go b/src/internal/packager2/layout/sbom.go new file mode 100644 index 0000000000..d7b71599cb --- /dev/null +++ b/src/internal/packager2/layout/sbom.go @@ -0,0 +1,334 @@ +package layout + +import ( + "context" + "embed" + "encoding/json" + "fmt" + "html/template" + "os" + "path/filepath" + "regexp" + "strconv" + + "github.com/anchore/stereoscope/pkg/file" + "github.com/anchore/stereoscope/pkg/image" + "github.com/anchore/syft/syft" + "github.com/anchore/syft/syft/artifact" + syftFile "github.com/anchore/syft/syft/file" + "github.com/anchore/syft/syft/format" + "github.com/anchore/syft/syft/format/syftjson" + "github.com/anchore/syft/syft/linux" + "github.com/anchore/syft/syft/pkg" + "github.com/anchore/syft/syft/sbom" + "github.com/anchore/syft/syft/source" + "github.com/anchore/syft/syft/source/directorysource" + "github.com/anchore/syft/syft/source/filesource" + "github.com/anchore/syft/syft/source/stereoscopesource" + "github.com/defenseunicorns/pkg/helpers/v2" + v1 "github.com/google/go-containerregistry/pkg/v1" + "github.com/mholt/archiver/v3" + + "github.com/zarf-dev/zarf/src/api/v1alpha1" + "github.com/zarf-dev/zarf/src/config" + "github.com/zarf-dev/zarf/src/pkg/transform" + "github.com/zarf-dev/zarf/src/pkg/utils" +) + +const componentPrefix = "zarf-component-" + +//go:embed viewer/* +var viewerAssets embed.FS +var transformRegex = regexp.MustCompile(`(?m)[^a-zA-Z0-9\.\-]`) + +func generateSBOM(ctx context.Context, pkg v1alpha1.ZarfPackage, buildPath string, images []transform.Image) error { + outputPath, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) + if err != nil { + return err + } + defer os.RemoveAll(outputPath) + + cachePath, err := config.GetAbsCachePath() + if err != nil { + return err + } + + componentSBOMs := []string{} + for _, comp := range pkg.Components { + if len(comp.Files) > 0 || len(comp.DataInjections) > 0 { + componentSBOMs = append(componentSBOMs, comp.Name) + } + } + jsonList, err := generateJSONList(componentSBOMs, images) + if err != nil { + return err + } + + for _, refInfo := range images { + img, err := utils.LoadOCIImage(filepath.Join(buildPath, string(ImagesDir)), refInfo) + if err != nil { + return err + } + b, err := createImageSBOM(ctx, cachePath, outputPath, img, refInfo.Reference) + if err != nil { + return err + } + err = createSBOMViewerAsset(outputPath, refInfo.Reference, b, jsonList) + if err != nil { + return err + } + } + + // Generate SBOM for each component + for _, comp := range pkg.Components { + if len(comp.DataInjections) == 0 && len(comp.Files) == 0 { + continue + } + jsonData, err := createFileSBOM(ctx, comp, outputPath, buildPath) + if err != nil { + return err + } + err = createSBOMViewerAsset(outputPath, fmt.Sprintf("%s%s", componentPrefix, comp.Name), jsonData, jsonList) + if err != nil { + return err + } + } + + // Include the compare tool if there are any image SBOMs OR component SBOMs + err = createSBOMCompareAsset(outputPath) + if err != nil { + return err + } + + err = createReproducibleTarballFromDir(outputPath, "", filepath.Join(buildPath, "sboms.tar"), false) + if err != nil { + return err + } + + return nil +} + +func createImageSBOM(ctx context.Context, cachePath, outputPath string, img v1.Image, src string) ([]byte, error) { + imageCachePath := filepath.Join(cachePath, ImagesDir) + err := os.MkdirAll(imageCachePath, helpers.ReadWriteExecuteUser) + if err != nil { + return nil, err + } + + refInfo, err := transform.ParseImageRef(src) + if err != nil { + return nil, fmt.Errorf("failed to create ref for image %s: %w", src, err) + } + syftImage := image.NewImage(img, file.NewTempDirGenerator("zarf"), imageCachePath, image.WithTags(refInfo.Reference)) + err = syftImage.Read() + if err != nil { + return nil, err + } + cfg := getDefaultSyftConfig() + syftSrc := stereoscopesource.New(syftImage, stereoscopesource.ImageConfig{ + Reference: refInfo.Reference, + }) + sbom, err := syft.CreateSBOM(ctx, syftSrc, cfg) + if err != nil { + return nil, err + } + jsonData, err := format.Encode(*sbom, syftjson.NewFormatEncoder()) + if err != nil { + return nil, err + } + + normalizedName := getNormalizedFileName(fmt.Sprintf("%s.json", refInfo.Reference)) + path := filepath.Join(outputPath, normalizedName) + err = os.WriteFile(path, jsonData, 0o666) + if err != nil { + return nil, err + } + return jsonData, nil +} + +func createFileSBOM(ctx context.Context, component v1alpha1.ZarfComponent, outputPath, buildPath string) ([]byte, error) { + tmpDir, err := utils.MakeTempDir(config.CommonOptions.TempDirectory) + if err != nil { + return nil, err + } + defer os.RemoveAll(tmpDir) + tarPath := filepath.Join(buildPath, ComponentsDir, component.Name) + ".tar" + err = archiver.Unarchive(tarPath, tmpDir) + if err != nil { + return nil, err + } + sbomFiles := []string{} + appendSBOMFiles := func(path string) error { + if helpers.IsDir(path) { + files, err := helpers.RecursiveFileList(path, nil, false) + if err != nil { + return err + } + sbomFiles = append(sbomFiles, files...) + } else { + sbomFiles = append(sbomFiles, path) + } + return nil + } + for i, file := range component.Files { + path := filepath.Join(tmpDir, component.Name, string(FilesComponentDir), strconv.Itoa(i), filepath.Base(file.Target)) + err := appendSBOMFiles(path) + if err != nil { + return nil, err + } + } + for i, data := range component.DataInjections { + path := filepath.Join(tmpDir, component.Name, string(DataComponentDir), strconv.Itoa(i), filepath.Base(data.Target.Path)) + err := appendSBOMFiles(path) + if err != nil { + return nil, err + } + } + + parentSource, err := directorysource.NewFromPath(tmpDir) + if err != nil { + return nil, err + } + catalog := pkg.NewCollection() + relationships := []artifact.Relationship{} + for _, sbomFile := range sbomFiles { + fileSrc, err := filesource.NewFromPath(sbomFile) + if err != nil { + return nil, err + } + + cfg := getDefaultSyftConfig() + sbom, err := syft.CreateSBOM(ctx, fileSrc, cfg) + if err != nil { + return nil, err + } + + for pkg := range sbom.Artifacts.Packages.Enumerate() { + containsSource := false + + // See if the source locations for this package contain the file Zarf indexed + for _, location := range pkg.Locations.ToSlice() { + if location.RealPath == fileSrc.Describe().Metadata.(source.FileMetadata).Path { + containsSource = true + } + } + + // If the locations do not contain the source file (i.e. the package was inside a tarball), add the file source + if !containsSource { + sourceLocation := syftFile.NewLocation(fileSrc.Describe().Metadata.(source.FileMetadata).Path) + pkg.Locations.Add(sourceLocation) + } + + catalog.Add(pkg) + } + + for _, r := range sbom.Relationships { + relationships = append(relationships, artifact.Relationship{ + From: parentSource, + To: r.To, + Type: r.Type, + Data: r.Data, + }) + } + } + artifact := sbom.SBOM{ + Descriptor: sbom.Descriptor{ + Name: "zarf", + Version: config.CLIVersion, + }, + Source: parentSource.Describe(), + Artifacts: sbom.Artifacts{ + Packages: catalog, + LinuxDistribution: &linux.Release{}, + }, + Relationships: relationships, + } + jsonData, err := format.Encode(artifact, syftjson.NewFormatEncoder()) + if err != nil { + return nil, err + } + + filename := fmt.Sprintf("%s%s.json", componentPrefix, component.Name) + path := filepath.Join(outputPath, getNormalizedFileName(filename)) + err = os.WriteFile(path, jsonData, 0o666) + if err != nil { + return nil, err + } + return jsonData, nil +} + +func createSBOMViewerAsset(outputDir, identifier string, jsonData, jsonList []byte) error { + filename := fmt.Sprintf("sbom-viewer-%s.html", getNormalizedFileName(identifier)) + return createSBOMHTML(outputDir, filename, "viewer/template.gohtml", jsonData, jsonList) +} + +func createSBOMCompareAsset(outputDir string) error { + return createSBOMHTML(outputDir, "compare.html", "viewer/compare.gohtml", nil, nil) +} + +func createSBOMHTML(outputDir, filename, goTemplate string, jsonData, jsonList []byte) error { + path := filepath.Join(outputDir, getNormalizedFileName(filename)) + file, err := os.Create(path) + if err != nil { + return err + } + defer file.Close() + tplData := struct { + ThemeCSS template.CSS + ViewerCSS template.CSS + List template.JS + Data template.JS + LibraryJS template.JS + CommonJS template.JS + ViewerJS template.JS + CompareJS template.JS + }{ + ThemeCSS: loadFileCSS("theme.css"), + ViewerCSS: loadFileCSS("styles.css"), + List: template.JS(jsonList), + Data: template.JS(jsonData), + LibraryJS: loadFileJS("library.js"), + CommonJS: loadFileJS("common.js"), + ViewerJS: loadFileJS("viewer.js"), + CompareJS: loadFileJS("compare.js"), + } + tpl, err := template.ParseFS(viewerAssets, goTemplate) + if err != nil { + return err + } + return tpl.Execute(file, tplData) +} + +func loadFileCSS(name string) template.CSS { + data, _ := viewerAssets.ReadFile("viewer/" + name) + return template.CSS(data) +} + +func loadFileJS(name string) template.JS { + data, _ := viewerAssets.ReadFile("viewer/" + name) + return template.JS(data) +} + +func getNormalizedFileName(identifier string) string { + return transformRegex.ReplaceAllString(identifier, "_") +} + +func generateJSONList(components []string, imageList []transform.Image) ([]byte, error) { + var jsonList []string + for _, refInfo := range imageList { + normalized := getNormalizedFileName(refInfo.Reference) + jsonList = append(jsonList, normalized) + } + for _, k := range components { + normalized := getNormalizedFileName(fmt.Sprintf("%s%s", componentPrefix, k)) + jsonList = append(jsonList, normalized) + } + return json.Marshal(jsonList) +} + +func getDefaultSyftConfig() *syft.CreateSBOMConfig { + cfg := syft.DefaultCreateSBOMConfig() + cfg.ToolName = "zarf" + cfg.ToolVersion = config.CLIVersion + return cfg +} diff --git a/src/internal/packager2/layout/sbom_test.go b/src/internal/packager2/layout/sbom_test.go new file mode 100644 index 0000000000..9c8edabcbc --- /dev/null +++ b/src/internal/packager2/layout/sbom_test.go @@ -0,0 +1,27 @@ +package layout + +import ( + "os" + "path/filepath" + "testing" + + "github.com/google/go-containerregistry/pkg/v1/empty" + "github.com/stretchr/testify/require" + "github.com/zarf-dev/zarf/src/test/testutil" +) + +func TestCreateImageSBOM(t *testing.T) { + t.Parallel() + + ctx := testutil.TestContext(t) + + outputPath := t.TempDir() + img := empty.Image + b, err := createImageSBOM(ctx, t.TempDir(), outputPath, img, "docker.io/foo/bar:latest") + require.NoError(t, err) + require.NotEmpty(t, b) + + fileContent, err := os.ReadFile(filepath.Join(outputPath, "docker.io_foo_bar_latest.json")) + require.NoError(t, err) + require.Equal(t, fileContent, b) +} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/archive.tar b/src/internal/packager2/layout/testdata/zarf-skeleton-package/archive.tar new file mode 100644 index 0000000000..cbbd80680c Binary files /dev/null and b/src/internal/packager2/layout/testdata/zarf-skeleton-package/archive.tar differ diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/.helmignore b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/.helmignore new file mode 100644 index 0000000000..f0c1319444 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/.helmignore @@ -0,0 +1,21 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*~ +# Various IDEs +.project +.idea/ +*.tmproj diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/Chart.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/Chart.yaml new file mode 100644 index 0000000000..0ae3bfd45f --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/Chart.yaml @@ -0,0 +1,13 @@ +apiVersion: v1 +version: 6.4.0 +appVersion: 6.4.0 +name: podinfo +engine: gotpl +description: Podinfo Helm chart for Kubernetes +home: https://github.com/stefanprodan/podinfo +maintainers: +- email: stefanprodan@users.noreply.github.com + name: stefanprodan +sources: +- https://github.com/stefanprodan/podinfo +kubeVersion: ">=1.23.0-0" diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/LICENSE b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/LICENSE new file mode 100644 index 0000000000..1b92ec15f9 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/LICENSE @@ -0,0 +1,201 @@ + Apache License + Version 2.0, January 2004 + http://www.apache.org/licenses/ + + TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION + + 1. Definitions. + + "License" shall mean the terms and conditions for use, reproduction, + and distribution as defined by Sections 1 through 9 of this document. + + "Licensor" shall mean the copyright owner or entity authorized by + the copyright owner that is granting the License. + + "Legal Entity" shall mean the union of the acting entity and all + other entities that control, are controlled by, or are under common + control with that entity. For the purposes of this definition, + "control" means (i) the power, direct or indirect, to cause the + direction or management of such entity, whether by contract or + otherwise, or (ii) ownership of fifty percent (50%) or more of the + outstanding shares, or (iii) beneficial ownership of such entity. + + "You" (or "Your") shall mean an individual or Legal Entity + exercising permissions granted by this License. + + "Source" form shall mean the preferred form for making modifications, + including but not limited to software source code, documentation + source, and configuration files. + + "Object" form shall mean any form resulting from mechanical + transformation or translation of a Source form, including but + not limited to compiled object code, generated documentation, + and conversions to other media types. + + "Work" shall mean the work of authorship, whether in Source or + Object form, made available under the License, as indicated by a + copyright notice that is included in or attached to the work + (an example is provided in the Appendix below). + + "Derivative Works" shall mean any work, whether in Source or Object + form, that is based on (or derived from) the Work and for which the + editorial revisions, annotations, elaborations, or other modifications + represent, as a whole, an original work of authorship. For the purposes + of this License, Derivative Works shall not include works that remain + separable from, or merely link (or bind by name) to the interfaces of, + the Work and Derivative Works thereof. + + "Contribution" shall mean any work of authorship, including + the original version of the Work and any modifications or additions + to that Work or Derivative Works thereof, that is intentionally + submitted to Licensor for inclusion in the Work by the copyright owner + or by an individual or Legal Entity authorized to submit on behalf of + the copyright owner. For the purposes of this definition, "submitted" + means any form of electronic, verbal, or written communication sent + to the Licensor or its representatives, including but not limited to + communication on electronic mailing lists, source code control systems, + and issue tracking systems that are managed by, or on behalf of, the + Licensor for the purpose of discussing and improving the Work, but + excluding communication that is conspicuously marked or otherwise + designated in writing by the copyright owner as "Not a Contribution." + + "Contributor" shall mean Licensor and any individual or Legal Entity + on behalf of whom a Contribution has been received by Licensor and + subsequently incorporated within the Work. + + 2. Grant of Copyright License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + copyright license to reproduce, prepare Derivative Works of, + publicly display, publicly perform, sublicense, and distribute the + Work and such Derivative Works in Source or Object form. + + 3. Grant of Patent License. Subject to the terms and conditions of + this License, each Contributor hereby grants to You a perpetual, + worldwide, non-exclusive, no-charge, royalty-free, irrevocable + (except as stated in this section) patent license to make, have made, + use, offer to sell, sell, import, and otherwise transfer the Work, + where such license applies only to those patent claims licensable + by such Contributor that are necessarily infringed by their + Contribution(s) alone or by combination of their Contribution(s) + with the Work to which such Contribution(s) was submitted. If You + institute patent litigation against any entity (including a + cross-claim or counterclaim in a lawsuit) alleging that the Work + or a Contribution incorporated within the Work constitutes direct + or contributory patent infringement, then any patent licenses + granted to You under this License for that Work shall terminate + as of the date such litigation is filed. + + 4. Redistribution. You may reproduce and distribute copies of the + Work or Derivative Works thereof in any medium, with or without + modifications, and in Source or Object form, provided that You + meet the following conditions: + + (a) You must give any other recipients of the Work or + Derivative Works a copy of this License; and + + (b) You must cause any modified files to carry prominent notices + stating that You changed the files; and + + (c) You must retain, in the Source form of any Derivative Works + that You distribute, all copyright, patent, trademark, and + attribution notices from the Source form of the Work, + excluding those notices that do not pertain to any part of + the Derivative Works; and + + (d) If the Work includes a "NOTICE" text file as part of its + distribution, then any Derivative Works that You distribute must + include a readable copy of the attribution notices contained + within such NOTICE file, excluding those notices that do not + pertain to any part of the Derivative Works, in at least one + of the following places: within a NOTICE text file distributed + as part of the Derivative Works; within the Source form or + documentation, if provided along with the Derivative Works; or, + within a display generated by the Derivative Works, if and + wherever such third-party notices normally appear. The contents + of the NOTICE file are for informational purposes only and + do not modify the License. You may add Your own attribution + notices within Derivative Works that You distribute, alongside + or as an addendum to the NOTICE text from the Work, provided + that such additional attribution notices cannot be construed + as modifying the License. + + You may add Your own copyright statement to Your modifications and + may provide additional or different license terms and conditions + for use, reproduction, or distribution of Your modifications, or + for any such Derivative Works as a whole, provided Your use, + reproduction, and distribution of the Work otherwise complies with + the conditions stated in this License. + + 5. Submission of Contributions. Unless You explicitly state otherwise, + any Contribution intentionally submitted for inclusion in the Work + by You to the Licensor shall be under the terms and conditions of + this License, without any additional terms or conditions. + Notwithstanding the above, nothing herein shall supersede or modify + the terms of any separate license agreement you may have executed + with Licensor regarding such Contributions. + + 6. Trademarks. This License does not grant permission to use the trade + names, trademarks, service marks, or product names of the Licensor, + except as required for reasonable and customary use in describing the + origin of the Work and reproducing the content of the NOTICE file. + + 7. Disclaimer of Warranty. Unless required by applicable law or + agreed to in writing, Licensor provides the Work (and each + Contributor provides its Contributions) on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or + implied, including, without limitation, any warranties or conditions + of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A + PARTICULAR PURPOSE. You are solely responsible for determining the + appropriateness of using or redistributing the Work and assume any + risks associated with Your exercise of permissions under this License. + + 8. Limitation of Liability. In no event and under no legal theory, + whether in tort (including negligence), contract, or otherwise, + unless required by applicable law (such as deliberate and grossly + negligent acts) or agreed to in writing, shall any Contributor be + liable to You for damages, including any direct, indirect, special, + incidental, or consequential damages of any character arising as a + result of this License or out of the use or inability to use the + Work (including but not limited to damages for loss of goodwill, + work stoppage, computer failure or malfunction, or any and all + other commercial damages or losses), even if such Contributor + has been advised of the possibility of such damages. + + 9. Accepting Warranty or Additional Liability. While redistributing + the Work or Derivative Works thereof, You may choose to offer, + and charge a fee for, acceptance of support, warranty, indemnity, + or other liability obligations and/or rights consistent with this + License. However, in accepting such obligations, You may act only + on Your own behalf and on Your sole responsibility, not on behalf + of any other Contributor, and only if You agree to indemnify, + defend, and hold each Contributor harmless for any liability + incurred by, or claims asserted against, such Contributor by reason + of your accepting any such warranty or additional liability. + + END OF TERMS AND CONDITIONS + + APPENDIX: How to apply the Apache License to your work. + + To apply the Apache License to your work, attach the following + boilerplate notice, with the fields enclosed by brackets "[]" + replaced with your own identifying information. (Don't include + the brackets!) The text should be enclosed in the appropriate + comment syntax for the file format. We also recommend that a + file or class name and description of purpose be included on the + same "printed page" as the copyright notice for easier + identification within third-party archives. + + Copyright 2018 Stefan Prodan. All rights reserved. + + Licensed under the Apache License, Version 2.0 (the "License"); + you may not use this file except in compliance with the License. + You may obtain a copy of the License at + + http://www.apache.org/licenses/LICENSE-2.0 + + Unless required by applicable law or agreed to in writing, software + distributed under the License is distributed on an "AS IS" BASIS, + WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. + See the License for the specific language governing permissions and + limitations under the License. diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/NOTICE b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/NOTICE new file mode 100644 index 0000000000..5b0414f8c2 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/NOTICE @@ -0,0 +1 @@ +All files from this chart are from https://github.com/stefanprodan/podinfo/tree/6.4.0/charts/podinfo. diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/NOTES.txt b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/NOTES.txt new file mode 100644 index 0000000000..d8329725ef --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/NOTES.txt @@ -0,0 +1,20 @@ +1. Get the application URL by running these commands: +{{- if .Values.ingress.enabled }} +{{- range $host := .Values.ingress.hosts }} + {{- range .paths }} + http{{ if $.Values.ingress.tls }}s{{ end }}://{{ $host.host }}{{ .path }} + {{- end }} +{{- end }} +{{- else if contains "NodePort" .Values.service.type }} + export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ template "podinfo.fullname" . }}) + export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}") + echo http://$NODE_IP:$NODE_PORT +{{- else if contains "LoadBalancer" .Values.service.type }} + NOTE: It may take a few minutes for the LoadBalancer IP to be available. + You can watch the status of by running 'kubectl get svc -w {{ template "podinfo.fullname" . }}' + export SERVICE_IP=$(kubectl get svc --namespace {{ .Release.Namespace }} {{ template "podinfo.fullname" . }} -o jsonpath='{.status.loadBalancer.ingress[0].ip}') + echo http://$SERVICE_IP:{{ .Values.service.externalPort }} +{{- else if contains "ClusterIP" .Values.service.type }} + echo "Visit http://127.0.0.1:8080 to use your application" + kubectl -n {{ .Release.Namespace }} port-forward deploy/{{ template "podinfo.fullname" . }} 8080:{{ .Values.service.externalPort }} +{{- end }} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/_helpers.tpl b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/_helpers.tpl new file mode 100644 index 0000000000..1f5a052871 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/_helpers.tpl @@ -0,0 +1,69 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "podinfo.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "podinfo.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "podinfo.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "podinfo.labels" -}} +helm.sh/chart: {{ include "podinfo.chart" . }} +{{ include "podinfo.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "podinfo.selectorLabels" -}} +app.kubernetes.io/name: {{ include "podinfo.fullname" . }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "podinfo.serviceAccountName" -}} +{{- if .Values.serviceAccount.enabled }} +{{- default (include "podinfo.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} + +{{/* +Create the name of the tls secret for secure port +*/}} +{{- define "podinfo.tlsSecretName" -}} +{{- $fullname := include "podinfo.fullname" . -}} +{{- default (printf "%s-tls" $fullname) .Values.tls.secretName }} +{{- end }} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/deployment.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/deployment.yaml new file mode 100644 index 0000000000..87ed373534 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/deployment.yaml @@ -0,0 +1,205 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ template "podinfo.fullname" . }} + labels: + {{- include "podinfo.labels" . | nindent 4 }} +spec: + {{- if not .Values.hpa.enabled }} + replicas: {{ .Values.replicaCount }} + {{- end }} + strategy: + type: RollingUpdate + rollingUpdate: + maxUnavailable: 1 + selector: + matchLabels: + {{- include "podinfo.selectorLabels" . | nindent 6 }} + template: + metadata: + labels: + {{- include "podinfo.selectorLabels" . | nindent 8 }} + annotations: + prometheus.io/scrape: "true" + prometheus.io/port: "{{ .Values.service.httpPort }}" + {{- range $key, $value := .Values.podAnnotations }} + {{ $key }}: {{ $value | quote }} + {{- end }} + spec: + terminationGracePeriodSeconds: 30 + {{- if .Values.serviceAccount.enabled }} + serviceAccountName: {{ template "podinfo.serviceAccountName" . }} + {{- end }} + containers: + - name: {{ .Chart.Name }} + image: "{{ .Values.image.repository }}:{{ .Values.image.tag }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + {{- if .Values.securityContext }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} + {{- else if (or .Values.service.hostPort .Values.tls.hostPort) }} + securityContext: + allowPrivilegeEscalation: true + capabilities: + drop: + - ALL + add: + - NET_BIND_SERVICE + {{- end }} + command: + - ./podinfo + - --port={{ .Values.service.httpPort | default 9898 }} + {{- if .Values.host }} + - --host={{ .Values.host }} + {{- end }} + {{- if .Values.tls.enabled }} + - --secure-port={{ .Values.tls.port }} + {{- end }} + {{- if .Values.tls.certPath }} + - --cert-path={{ .Values.tls.certPath }} + {{- end }} + {{- if .Values.service.metricsPort }} + - --port-metrics={{ .Values.service.metricsPort }} + {{- end }} + {{- if .Values.service.grpcPort }} + - --grpc-port={{ .Values.service.grpcPort }} + {{- end }} + {{- if .Values.service.grpcService }} + - --grpc-service-name={{ .Values.service.grpcService }} + {{- end }} + {{- range .Values.backends }} + - --backend-url={{ . }} + {{- end }} + {{- if .Values.cache }} + - --cache-server={{ .Values.cache }} + {{- else if .Values.redis.enabled }} + - --cache-server=tcp://{{ template "podinfo.fullname" . }}-redis:6379 + {{- end }} + - --level={{ .Values.logLevel }} + - --random-delay={{ .Values.faults.delay }} + - --random-error={{ .Values.faults.error }} + {{- if .Values.faults.unhealthy }} + - --unhealthy + {{- end }} + {{- if .Values.faults.unready }} + - --unready + {{- end }} + {{- if .Values.h2c.enabled }} + - --h2c + {{- end }} + env: + {{- if .Values.ui.message }} + - name: PODINFO_UI_MESSAGE + value: {{ quote .Values.ui.message }} + {{- end }} + {{- if .Values.ui.logo }} + - name: PODINFO_UI_LOGO + value: {{ .Values.ui.logo }} + {{- end }} + {{- if .Values.ui.color }} + - name: PODINFO_UI_COLOR + value: {{ quote .Values.ui.color }} + {{- end }} + {{- if .Values.backend }} + - name: PODINFO_BACKEND_URL + value: {{ .Values.backend }} + {{- end }} + ports: + - name: http + containerPort: {{ .Values.service.httpPort | default 9898 }} + protocol: TCP + {{- if .Values.service.hostPort }} + hostPort: {{ .Values.service.hostPort }} + {{- end }} + {{- if .Values.tls.enabled }} + - name: https + containerPort: {{ .Values.tls.port | default 9899 }} + protocol: TCP + {{- if .Values.tls.hostPort }} + hostPort: {{ .Values.tls.hostPort }} + {{- end }} + {{- end }} + {{- if .Values.service.metricsPort }} + - name: http-metrics + containerPort: {{ .Values.service.metricsPort }} + protocol: TCP + {{- end }} + {{- if .Values.service.grpcPort }} + - name: grpc + containerPort: {{ .Values.service.grpcPort }} + protocol: TCP + {{- end }} + {{- if .Values.probes.startup.enable }} + startupProbe: + exec: + command: + - podcli + - check + - http + - localhost:{{ .Values.service.httpPort | default 9898 }}/healthz + {{- with .Values.probes.startup }} + initialDelaySeconds: {{ .initialDelaySeconds | default 1 }} + timeoutSeconds: {{ .timeoutSeconds | default 5 }} + failureThreshold: {{ .failureThreshold | default 3 }} + successThreshold: {{ .successThreshold | default 1 }} + periodSeconds: {{ .periodSeconds | default 10 }} + {{- end }} + {{- end }} + livenessProbe: + exec: + command: + - podcli + - check + - http + - localhost:{{ .Values.service.httpPort | default 9898 }}/healthz + {{- with .Values.probes.liveness }} + initialDelaySeconds: {{ .initialDelaySeconds | default 1 }} + timeoutSeconds: {{ .timeoutSeconds | default 5 }} + failureThreshold: {{ .failureThreshold | default 3 }} + successThreshold: {{ .successThreshold | default 1 }} + periodSeconds: {{ .periodSeconds | default 10 }} + {{- end }} + readinessProbe: + exec: + command: + - podcli + - check + - http + - localhost:{{ .Values.service.httpPort | default 9898 }}/readyz + {{- with .Values.probes.readiness }} + initialDelaySeconds: {{ .initialDelaySeconds | default 1 }} + timeoutSeconds: {{ .timeoutSeconds | default 5 }} + failureThreshold: {{ .failureThreshold | default 3 }} + successThreshold: {{ .successThreshold | default 1 }} + periodSeconds: {{ .periodSeconds | default 10 }} + {{- end }} + volumeMounts: + - name: data + mountPath: /data + {{- if .Values.tls.enabled }} + - name: tls + mountPath: {{ .Values.tls.certPath | default "/data/cert" }} + readOnly: true + {{- end }} + resources: +{{ toYaml .Values.resources | indent 12 }} + {{- with .Values.nodeSelector }} + nodeSelector: +{{ toYaml . | indent 8 }} + {{- end }} + {{- with .Values.affinity }} + affinity: +{{ toYaml . | indent 8 }} + {{- end }} + {{- with .Values.tolerations }} + tolerations: +{{ toYaml . | indent 8 }} + {{- end }} + volumes: + - name: data + emptyDir: {} + {{- if .Values.tls.enabled }} + - name: tls + secret: + secretName: {{ template "podinfo.tlsSecretName" . }} + {{- end }} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/hpa.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/hpa.yaml new file mode 100644 index 0000000000..f2fb8df1b8 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/hpa.yaml @@ -0,0 +1,41 @@ +{{- if .Values.hpa.enabled -}} +apiVersion: autoscaling/v2 +kind: HorizontalPodAutoscaler +metadata: + name: {{ template "podinfo.fullname" . }} + labels: + {{- include "podinfo.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ template "podinfo.fullname" . }} + minReplicas: {{ .Values.replicaCount }} + maxReplicas: {{ .Values.hpa.maxReplicas }} + metrics: + {{- if .Values.hpa.cpu }} + - type: Resource + resource: + name: cpu + target: + type: Utilization + averageUtilization: {{ .Values.hpa.cpu }} + {{- end }} + {{- if .Values.hpa.memory }} + - type: Resource + resource: + name: memory + target: + type: AverageValue + averageValue: {{ .Values.hpa.memory }} + {{- end }} + {{- if .Values.hpa.requests }} + - type: Pods + pods: + metric: + name: http_requests + target: + type: AverageValue + averageValue: {{ .Values.hpa.requests }} + {{- end }} +{{- end }} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/ingress.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/ingress.yaml new file mode 100644 index 0000000000..93f9ae437a --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/ingress.yaml @@ -0,0 +1,41 @@ +{{- if .Values.ingress.enabled -}} +{{- $fullName := include "podinfo.fullname" . -}} +{{- $svcPort := .Values.service.externalPort -}} +apiVersion: networking.k8s.io/v1 +kind: Ingress +metadata: + name: {{ $fullName }} + labels: + {{- include "podinfo.labels" . | nindent 4 }} + {{- with .Values.ingress.annotations }} + annotations: + {{- toYaml . | nindent 4 }} + {{- end }} +spec: + ingressClassName: {{ .Values.ingress.className }} + {{- if .Values.ingress.tls }} + tls: + {{- range .Values.ingress.tls }} + - hosts: + {{- range .hosts }} + - {{ . | quote }} + {{- end }} + secretName: {{ .secretName }} + {{- end }} + {{- end }} + rules: + {{- range .Values.ingress.hosts }} + - host: {{ .host | quote }} + http: + paths: + {{- range .paths }} + - path: {{ .path }} + pathType: {{ .pathType }} + backend: + service: + name: {{ $fullName }} + port: + number: {{ $svcPort }} + {{- end }} + {{- end }} +{{- end }} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/service.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/service.yaml new file mode 100644 index 0000000000..6014e78853 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/service.yaml @@ -0,0 +1,36 @@ +{{- if .Values.service.enabled -}} +apiVersion: v1 +kind: Service +metadata: + name: {{ template "podinfo.fullname" . }} + labels: + {{- include "podinfo.labels" . | nindent 4 }} +{{- with .Values.service.annotations }} + annotations: +{{ toYaml . | indent 4 }} +{{- end }} +spec: + type: {{ .Values.service.type }} + ports: + - port: {{ .Values.service.externalPort }} + targetPort: http + protocol: TCP + name: http + {{- if (and (eq .Values.service.type "NodePort") (not (empty .Values.service.nodePort))) }} + nodePort: {{ .Values.service.nodePort }} + {{- end }} + {{- if .Values.tls.enabled }} + - port: {{ .Values.tls.port | default 9899 }} + targetPort: https + protocol: TCP + name: https + {{- end }} + {{- if .Values.service.grpcPort }} + - port: {{ .Values.service.grpcPort }} + targetPort: grpc + protocol: TCP + name: grpc + {{- end }} + selector: + {{- include "podinfo.selectorLabels" . | nindent 4 }} +{{- end }} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/serviceaccount.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/serviceaccount.yaml new file mode 100644 index 0000000000..d39b798967 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/templates/serviceaccount.yaml @@ -0,0 +1,12 @@ +{{- if .Values.serviceAccount.enabled -}} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ template "podinfo.serviceAccountName" . }} + labels: + {{- include "podinfo.labels" . | nindent 4 }} +{{- with .Values.serviceAccount.imagePullSecrets }} +imagePullSecrets: + {{- toYaml . | nindent 2 }} +{{- end -}} +{{- end -}} diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/values.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/values.yaml new file mode 100644 index 0000000000..89b2bd9129 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/chart/values.yaml @@ -0,0 +1,164 @@ +# Default values for podinfo. + +replicaCount: 1 +logLevel: info +host: #0.0.0.0 +backend: #http://backend-podinfo:9898/echo +backends: [] + +image: + repository: ghcr.io/stefanprodan/podinfo + tag: 6.4.0 + pullPolicy: IfNotPresent + +ui: + color: "#34577c" + message: "" + logo: "" + +# failure conditions +faults: + delay: false + error: false + unhealthy: false + unready: false + testFail: false + testTimeout: false + +# Kubernetes Service settings +service: + enabled: true + annotations: {} + type: ClusterIP + metricsPort: 9797 + httpPort: 9898 + externalPort: 9898 + grpcPort: 9999 + grpcService: podinfo + nodePort: 31198 + # the port used to bind the http port to the host + # NOTE: requires privileged container with NET_BIND_SERVICE capability -- this is useful for testing + # in local clusters such as kind without port forwarding + hostPort: + +# enable h2c protocol (non-TLS version of HTTP/2) +h2c: + enabled: false + +# enable tls on the podinfo service +tls: + enabled: false + # the name of the secret used to mount the certificate key pair + secretName: + # the path where the certificate key pair will be mounted + certPath: /data/cert + # the port used to host the tls endpoint on the service + port: 9899 + # the port used to bind the tls port to the host + # NOTE: requires privileged container with NET_BIND_SERVICE capability -- this is useful for testing + # in local clusters such as kind without port forwarding + hostPort: + +# create a certificate manager certificate (cert-manager required) +certificate: + create: false + # the issuer used to issue the certificate + issuerRef: + kind: ClusterIssuer + name: self-signed + # the hostname / subject alternative names for the certificate + dnsNames: + - podinfo + +# metrics-server add-on required +hpa: + enabled: false + maxReplicas: 10 + # average total CPU usage per pod (1-100) + cpu: + # average memory usage per pod (100Mi-1Gi) + memory: + # average http requests per second per pod (k8s-prometheus-adapter) + requests: + +# Redis address in the format tcp://: +cache: "" +# Redis deployment +redis: + enabled: false + repository: redis + tag: 7.0.7 + +serviceAccount: + # Specifies whether a service account should be created + enabled: false + # The name of the service account to use. + # If not set and create is true, a name is generated using the fullname template + name: + # List of image pull secrets if pulling from private registries + imagePullSecrets: [] + +# set container security context +securityContext: {} + +ingress: + enabled: false + className: "" + annotations: {} + # kubernetes.io/ingress.class: nginx + # kubernetes.io/tls-acme: "true" + hosts: + - host: podinfo.local + paths: + - path: / + pathType: ImplementationSpecific + tls: [] + # - secretName: chart-example-tls + # hosts: + # - chart-example.local + +linkerd: + profile: + enabled: false + +# create Prometheus Operator monitor +serviceMonitor: + enabled: false + interval: 15s + additionalLabels: {} + +resources: + limits: + requests: + cpu: 1m + memory: 16Mi + +nodeSelector: {} + +tolerations: [] + +affinity: {} + +podAnnotations: {} + +# https://kubernetes.io/docs/concepts/workloads/pods/pod-lifecycle#container-probes +probes: + readiness: + initialDelaySeconds: 1 + timeoutSeconds: 5 + failureThreshold: 3 + successThreshold: 1 + periodSeconds: 10 + liveness: + initialDelaySeconds: 1 + timeoutSeconds: 5 + failureThreshold: 3 + successThreshold: 1 + periodSeconds: 10 + startup: + enable: false + initialDelaySeconds: 10 + timeoutSeconds: 5 + failureThreshold: 20 + successThreshold: 1 + periodSeconds: 10 diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/data.txt b/src/internal/packager2/layout/testdata/zarf-skeleton-package/data.txt new file mode 100644 index 0000000000..557db03de9 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/data.txt @@ -0,0 +1 @@ +Hello World diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/deployment.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/deployment.yaml new file mode 100644 index 0000000000..685c17aa68 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/deployment.yaml @@ -0,0 +1,21 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: nginx-deployment + labels: + app: nginx +spec: + replicas: 3 + selector: + matchLabels: + app: nginx + template: + metadata: + labels: + app: nginx + spec: + containers: + - name: nginx + image: nginx:1.14.2 + ports: + - containerPort: 80 diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/injection/data.txt b/src/internal/packager2/layout/testdata/zarf-skeleton-package/injection/data.txt new file mode 100644 index 0000000000..1269488f7f --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/injection/data.txt @@ -0,0 +1 @@ +data diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/kustomize/kustomization.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/kustomize/kustomization.yaml new file mode 100644 index 0000000000..736967b1a3 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/kustomize/kustomization.yaml @@ -0,0 +1,2 @@ +resources: + - namespace.yaml diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/kustomize/namespace.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/kustomize/namespace.yaml new file mode 100644 index 0000000000..7c265c0193 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/kustomize/namespace.yaml @@ -0,0 +1,4 @@ +apiVersion: v1 +kind: Namespace +metadata: + name: test diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/values.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/values.yaml new file mode 100644 index 0000000000..f86a45afe7 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/values.yaml @@ -0,0 +1,5 @@ +ui: + color: "#0d133d" + message: "greetings from podinfo (as deployed by Zarf)" + # Replace the githubusercontent URL for the airgap + logo: "data:image/svg+xml;base64,PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiIHN0YW5kYWxvbmU9Im5vIj8+CjwhLS0gQ3JlYXRlZCB3aXRoIFZlY3Rvcm5hdG9yIChodHRwOi8vdmVjdG9ybmF0b3IuaW8vKSAtLT4KCjxzdmcKICAgaGVpZ2h0PSI2NCIKICAgc3Ryb2tlLW1pdGVybGltaXQ9IjEwIgogICBzdHlsZT0iY2xpcC1ydWxlOmV2ZW5vZGQ7ZmlsbC1ydWxlOm5vbnplcm87c3Ryb2tlLWxpbmVjYXA6cm91bmQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kIgogICB2ZXJzaW9uPSIxLjEiCiAgIHZpZXdCb3g9IjAgMCA2NCA2NCIKICAgd2lkdGg9IjY0IgogICB4bWw6c3BhY2U9InByZXNlcnZlIgogICBpZD0ic3ZnODY1IgogICBzb2RpcG9kaTpkb2NuYW1lPSJaYXJmLXJlZG8uc3ZnIgogICBpbmtzY2FwZTp2ZXJzaW9uPSIxLjIuMiAoYjBhODQ4NjU0MSwgMjAyMi0xMi0wMSkiCiAgIHhtbG5zOmlua3NjYXBlPSJodHRwOi8vd3d3Lmlua3NjYXBlLm9yZy9uYW1lc3BhY2VzL2lua3NjYXBlIgogICB4bWxuczpzb2RpcG9kaT0iaHR0cDovL3NvZGlwb2RpLnNvdXJjZWZvcmdlLm5ldC9EVEQvc29kaXBvZGktMC5kdGQiCiAgIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5L3hsaW5rIgogICB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciCiAgIHhtbG5zOnN2Zz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciCiAgIHhtbG5zOnZlY3Rvcm5hdG9yPSJodHRwOi8vdmVjdG9ybmF0b3IuaW8iPjxzb2RpcG9kaTpuYW1lZHZpZXcKICAgaWQ9Im5hbWVkdmlldzg2NyIKICAgcGFnZWNvbG9yPSIjNTA1MDUwIgogICBib3JkZXJjb2xvcj0iI2VlZWVlZSIKICAgYm9yZGVyb3BhY2l0eT0iMSIKICAgaW5rc2NhcGU6c2hvd3BhZ2VzaGFkb3c9IjAiCiAgIGlua3NjYXBlOnBhZ2VvcGFjaXR5PSIwIgogICBpbmtzY2FwZTpwYWdlY2hlY2tlcmJvYXJkPSIwIgogICBpbmtzY2FwZTpkZXNrY29sb3I9IiM1MDUwNTAiCiAgIHNob3dncmlkPSJmYWxzZSIKICAgaW5rc2NhcGU6em9vbT0iMTYiCiAgIGlua3NjYXBlOmN4PSIzMi42NTYyNSIKICAgaW5rc2NhcGU6Y3k9IjM2LjUiCiAgIGlua3NjYXBlOndpbmRvdy13aWR0aD0iMjU2MCIKICAgaW5rc2NhcGU6d2luZG93LWhlaWdodD0iMTM3MSIKICAgaW5rc2NhcGU6d2luZG93LXg9IjAiCiAgIGlua3NjYXBlOndpbmRvdy15PSIzMiIKICAgaW5rc2NhcGU6d2luZG93LW1heGltaXplZD0iMSIKICAgaW5rc2NhcGU6Y3VycmVudC1sYXllcj0iZzQzNjEiIC8+CjxkZWZzCiAgIGlkPSJkZWZzNjE0Ij4KPHBhdGgKICAgZD0ibSA0OC45MTY2LDI1LjYzMDIgYyAwLjc1ODYsMC4zODc5IDQuMzU1MiwxLjk3MjQgOC44NDc4LC0wLjE3OTggLTAuNDAxNSwtMC42MzY2IC0xLjkxMTYsLTIuNjgzNSAtNC45OTI1LC00LjA2NSAtMS4zNTQ1LC0wLjQyMjEgLTIuNTIxOSwtMC40MzI2IC0zLjM4MzYsLTAuMjAwNiAtMS4yMTE4LDEuNDM4MyAtMS40Nzk2LDIuOTc4OSAtMC40NzE3LDQuNDQ1NCB6IgogICBpZD0iRmlsbCIgLz4KPGxpbmVhckdyYWRpZW50CiAgIGdyYWRpZW50VHJhbnNmb3JtPSJ0cmFuc2xhdGUoMC4wNjA0OTU1LDAuMDkwNzQzMikiCiAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICBpZD0iTGluZWFyR3JhZGllbnQiCiAgIHgxPSIzMS4xOTYxIgogICB4Mj0iMzEuMTk2MSIKICAgeTE9IjYxLjM3NjQ5OSIKICAgeTI9IjEuODA0OTk5OSI+CjxzdG9wCiAgIG9mZnNldD0iMCIKICAgc3RvcC1jb2xvcj0iIzdiZDVmNSIKICAgaWQ9InN0b3A1NTAiIC8+CjxzdG9wCiAgIG9mZnNldD0iMSIKICAgc3RvcC1jb2xvcj0iI2RjY2ZlNSIKICAgaWQ9InN0b3A1NTIiIC8+CjwvbGluZWFyR3JhZGllbnQ+CjxwYXRoCiAgIGQ9Im0gNDkuMzczNCwyMC42NjA4IGMgMC44NTA3LDAuMjg5NyA2LjAxMzcsMS42NzI1IDExLjE3NTEsLTQuOTYxNSAtMS41OTM0LC0xLjIzNTYgLTkuMDkzOCwtMi4zNzA5IC0xMi4xODAyLDAuNTM4IC0xLjEyMjYsMS41MDczIC0wLjk2MjEsMy4yNTg3IDEuMDAzNiw0LjM5OTMgeiIKICAgaWQ9IkZpbGxfMiIgLz4KPGxpbmVhckdyYWRpZW50CiAgIGdyYWRpZW50VHJhbnNmb3JtPSJ0cmFuc2xhdGUoMC4wNjMyNDQ1LC0wLjAwNTQ5OTU5KSIKICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgIGlkPSJMaW5lYXJHcmFkaWVudF8yIgogICB4MT0iMzEuMTk2MSIKICAgeDI9IjMxLjE5NjEiCiAgIHkxPSI2MS4zNzY0OTkiCiAgIHkyPSIxLjgwNDk5OTkiPgo8c3RvcAogICBvZmZzZXQ9IjAiCiAgIHN0b3AtY29sb3I9IiM3YmQ1ZjUiCiAgIGlkPSJzdG9wNTU2IiAvPgo8c3RvcAogICBvZmZzZXQ9IjEiCiAgIHN0b3AtY29sb3I9IiNkY2NmZTUiCiAgIGlkPSJzdG9wNTU4IiAvPgo8L2xpbmVhckdyYWRpZW50Pgo8cGF0aAogICBkPSJNIDQ4LjE3NTYsMTUuODIzMyBDIDU4LjM0ODYsMTMuMzc4NSA1OS4zNzc5LDcuNjE5NzcgNTkuNjEzNyw2LjI3NjQzIDQ5LjczNyw1Ljk1ODEgNDUuNzg2MywxMC4zMjg4IDQ1LjAzNzYsMTEuMzAyOSBjIDAuMjUyNCwyLjE3OTYgMC42MDM1LDMuNDU2MiAzLjEzNSw0LjUxMzggeiIKICAgaWQ9IkZpbGxfMyIgLz4KPGxpbmVhckdyYWRpZW50CiAgIGdyYWRpZW50VHJhbnNmb3JtPSJ0cmFuc2xhdGUoMC4wMzYzOTMxLC0wLjAyMTgzNTgpIgogICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgaWQ9IkxpbmVhckdyYWRpZW50XzMiCiAgIHgxPSIzMS4xOTYxIgogICB4Mj0iMzEuMTk2MSIKICAgeTE9IjYxLjM3NjQ5OSIKICAgeTI9IjEuODA0OTk5OSI+CjxzdG9wCiAgIG9mZnNldD0iMCIKICAgc3RvcC1jb2xvcj0iIzdiZDVmNSIKICAgaWQ9InN0b3A1NjIiIC8+CjxzdG9wCiAgIG9mZnNldD0iMSIKICAgc3RvcC1jb2xvcj0iI2RjY2ZlNSIKICAgaWQ9InN0b3A1NjQiIC8+CjwvbGluZWFyR3JhZGllbnQ+CjxwYXRoCiAgIGQ9Im0gMjUuODQ3NCw1MC43MDM2IGMgLTAuNjE1MywwLjg3NTYgLTIuMzk2LDIuMzk0OCAtMy4zMjY5LDIuOTIzNiAtMS4wNzIsMC42MDY1IC0yLjI3NzMsMC45MzkzIC0zLjUwODksMC45Njg3IC0xLjIzMTYsMC4wMjk1IC0yLjQ1MTUsLTAuMjQ1NCAtMy41NTEzLC0wLjggLTIuMjkwNywtMS4xNjgzIC00LjE0OTksLTMuNjY0NCAtNC44NzE3LC03LjYzMzYgLTAuMDUzMSwtMC4yOTE5IC0wLjUzNTIsLTAuNTA4IC0wLjU0NzksLTAuMDQwMSAwLjA0NzcsNS42Njk0IDIuMzExNiw5LjM3MTEgNS40MjEyLDExLjMxOTIgMC41MDg3LDAuMzcyIDEuMDQzMiwwLjU2NTcgMS42MjY1LDAuODA0NyA3LjY0NjQsMi4zMzk3IDEyLjgwNzgsLTIuNDM1MiAxNC44Nzg3LC00Ljk1MzIgLTAuNjEzNywxLjU0OTYgLTEuNTUxLDIuOTUwNiAtMi43NDk1LDQuMTA5NiAtMC45MjgxLDAuODk3NiAtMS45ODczLDEuNjQ4OSAtMy4xNDE0LDIuMjI4MyAtMS40MjUyLDAuNzEzNiAtMi45NjM1LDEuMTc0NSAtNC41NDY1LDEuMzYyNSAtMS41NzU0LDAuMTkwNiAtMy4xNzIyLDAuMDk4OSAtNC43MTUzLC0wLjI3MDYgQyAxNS4xNTEyLDYwLjMzNDMgMTMuNTk0OSw1OS41ODIxIDEyLjI1NzgsNTguNTIwMyAxMC45MjA2LDU3LjQ1ODQgOS44MzU5NCw1Ni4xMTM0IDkuMDgxODgsNTQuNTgyMiA2LjkwNTgyLDUwLjEyNTYgNy4yNjkwMyw0NS41MDY2IDguMzkwNTEsNDIuOTA5MSA4LjYzOTQ3LDQyLjI0MTggOS4wNDYwNiw0MS42NDQ0IDkuNTc1NzIsNDEuMTY3OCA5LjcxNDQzLDQxLjAzMjkgOS44OTM1OSw0MC45NDcgMTAuMDg1OCw0MC45MjM1IGMgMC4xOTIyLC0wLjAyMzYgMC4zODY4LDAuMDE2NCAwLjU1NCwwLjExMzggMC41Mzg1LDAuMzQzOCAxLjAxNjQsMS4zMjQzIDEuMjk5OSwzLjEyNiAwLjg0NDQsNC43NjUgMi43NDY1LDYuOTk3NCA1LjgwNjQsOC43ODQyIDAuNjk0MiwwLjM1OSAxLjc5MjUsMC42MzIzIDIuNTc0MSwwLjY0MjIgMC43ODE1LDAuMDEgMS41NTQ2LC0wLjE2MjUgMi4yNTc3LC0wLjUwMzcgMC44NDQyLC0wLjQwNDIgMi4yODYxLC0xLjAwMTYgMy4yNjk1LC0yLjM4MjQgeiIKICAgaWQ9IkZpbGxfNCIgLz4KPHBhdGgKICAgZD0ibSAzMS43MTIyLDQyLjcxMTcgYyAtMC4zNDE5LC0xLjQzNDYgLTAuNjgxOCwtMi44NzEzIC0xLjAxOTUsLTQuMzEwMSBoIC0wLjAxOTEgYyAwLjA2MzcsLTAuOTU1IDAuNDIzNywtMi4wNzg3IDAuMTg4LC0yLjg2NSBsIC0wLjYxMTcsMi44MDc3IHYgMC4wOTIzIGwgMS4wNTEzLDQuNDU2NiBjIDAuMDMxOSwwLjA0MTQgMC4wNjM4LDAuMDg1OSAwLjA5MjQsMC4xMzA1IGwgMS41MjkzLDAuOTU1IC0xLjQ5MSwwLjI0ODMgMC4wNjY5LDAuMjI5MiBjIDAsMC4wMDMxIDAuMzMxMywxLjEwNzcgLTAuMDcwMSwxLjg1OSAtMC4yMDM5LC0wLjM5MTYgLTAuNjIxMywtMS4wNiAtMC44NDExLC0xLjQ1MTYgLTAuMDc2NSwwLjAxMjggLTAuNDY4NCwxLjI3NjUgLTEuMzE5LDEuNjkwMyAtMC4wMTI4LC0wLjU3OTMgLTAuMDM1MSwtMS4xNTg3IC0wLjAzNTEsLTEuNzM4IGwgLTAuMzUwNSwwLjM0MzggYyAtMC4zNDQ1LDAuMzEyMSAtMC43NzU0LDAuNTEzIC0xLjIzNjEsMC41NzYxIDAuNDk3LC0wLjUwMjkgMS4zMDk0LC0xLjM4NzkgMS4yNzQ0LC0xLjkwOTkgLTAuMDE1NiwtMC4yMzk5IC0wLjM0NTUsLTAuNzI5OCAtMC44MDE2LC0xLjQwNzEgbCAtMC4wMywtMC4wNDQ1IGMgLTAuOTIzOSwtMS4zMzA2IC0yLjc3NSwtNC4xMjg3IC0zLjE1NDEsLTYuNDIzOCAtMC4xNjU3LDIuMjYzMyAxLjY4ODYsNS4wMTA0IDIuODAzNyw2LjY1OTQgMC4yOTk2LDAuMzg0NSAwLjU1NCwwLjgwMjEgMC43NTgyLDEuMjQ0NiAwLjAzNTEsMC41NDQ0IC0xLjUyOTMsMS45MjU5IC0xLjUyOTMsMS45MjU5IDAsMCAtMC4zNTY4LDAuMzE1MSAwLjExNDcsMC4zNjkzIDAuNjExNiwwLjA2NjkgMS4yMjczLC0wLjA4MyAxLjczOTYsLTAuNDIzNCAwLjAyMjMsMC4zNzg4IDAuMDIyMywwLjc1NDQgMC4wMjIzLDEuMTMzMiAwLDAgLTAuMDM4MiwwLjMxMiAwLjI4MDQsMC4yMDA2IDAuMzI1MiwtMC4xMDc0IDAuNjI1NCwtMC4yNzkyIDAuODgyNywtMC41MDUgMC4yNTczLC0wLjIyNTkgMC40NjYzLC0wLjUwMTMgMC42MTQ3LC0wLjgwOTcgbCAwLjU1NzYsMC45OTMyIGMgMC4wMjU1LDAuMDQ3NyAwLjEyMSwwLjM4NTEgMC4zNzU5LDAuMTA4MiAwLjYzNzIsLTAuNjk0IDAuNDk3LC0xLjgwODEgMC4zOTgzLC0yLjI4NTYgbCAxLjU5MywtMC4yNjQyIGMgMC4wNzY1LC0wLjAwOTYgMC4yMTY2LC0wLjI5MjkgMC4wNzY1LC0wLjM4ODQgeiBNIDE3LjI1NCw1Ny43MjA5IGMgOS42OCwyLjk2NTEgMTUuMTgyMywtNS45ODM0IDE1LjI1MDksLTYuMDk1IGwgN2UtNCwtMC4wMDEgYyAwLjA0LC0wLjA2MyAwLjEwMzIsLTAuMTA3NyAwLjE3NiwtMC4xMjQ0IDAuMDcyOCwtMC4wMTY3IDAuMTQ5MiwtMC4wMDQgMC4yMTI3LDAuMDM1MyAwLjA1MjEsMC4wMzI3IDAuMDkyNCwwLjA4MTMgMC4xMTQ4LDAuMTM4NiAwLjAyMjQsMC4wNTczIDAuMDI1NywwLjEyMDMgMC4wMDk0LDAuMTc5NyAtMC40NDAzLDEuODQwNyAtMS4yOTk0LDMuNTU1MyAtMi41MTA2LDUuMDEwNSAzLjg3MSwtMS44NTkxIDcuMDA5MywtNC45NDA1IDcuODA1OCwtOC42MjM1IC0wLjI2MTMsLTAuMDc5NiAtMC45NTU4LC0wLjg4MTggLTAuOTk3MiwtMC45NTUgMS40MzY5LDAuODM0IDIuMDgzNiwwLjg0MDQgMy43OTQ1LDEuMDc1OSBsIDAuMTcyMSwwLjAyNTUgdiAwLjE3MTkgYyAtMC4wMDE0LDAuNDMxIDAuMTYzMywwLjg0NTkgMC40NTk5LDEuMTU4OSAwLjI5NjYsMC4zMTI5IDAuNzAyMywwLjQ5OTggMS4xMzMxLDAuNTIxOSAxLjI3NTUsLTAuNTE0OCA1LjI1MjEsLTEuMDgyMiA2LjUzODgsLTEuMjY1OCBsIDAuMDUzMSwtMC4wMDc1IGMgLTAuMjIxMiwtMC4yOTUxIC0wLjkyNzIsLTAuNTU0IC0xLjQxNzgsLTAuNzc5OSBsIC0wLjM4ODcsLTAuMTg0NyAwLjM4MjMsLTAuMTk0MiBjIDAuNTk2MiwtMC4yNjA2IDEuNTkxLC0wLjU1MTMgMS44MjU2LC0wLjY4NzUgLTAuODQ0MiwtMC41MTY2IC0yLjYwOTMsLTAuMjM4OCAtMi42MTI1LC0wLjIzODggbCAtMC40MTQyLDAuMDczMiBjIDAuNDc3OSwtMC45NTUgMi4xNzIzLC0xLjkwMTYgMi4zNzY4LC0yLjA5NzcgLTEuMDg4MywtMC40Mjc2IC0zLjU4NzUsMC45NzQgLTQuMDQzMSwxLjIxNiAtMC4wNjY5LDAuMzUwMSAtMC4xNDY2LDAuODM0IC0wLjM3OTEsMS4wNzI3IDAuMDI4NiwtMC43NTEyIDAuMTgzOCwtMi4xODM5IDAuMTU5MywtMi41MTc5IC0wLjE0NTIsMC4xMDA5IC0yLjI3NDksMi40OTg4IC0yLjI4MTIsMi41MDIgMC4wMjE4LC0wLjQzMTkgMC4yMDM1LC0wLjg0MDMgMC41MDk3LC0xLjE0NiAwLjM3OTIsLTIuNzQ3MSAtMS40OTEsLTUuMzA2NSAtMi4wMTA0LC01Ljk1NTkgLTAuMTg0NywwLjM3ODggLTAuMzg4NiwwLjc2NzIgLTAuNTgzLDEuMTM5NiBsIC0wLjAxNjMsMC4wMzE0IGMgLTAuNDQ1OCwwLjg1OTYgLTAuODQ0MiwxLjYyNzUgLTAuODYzLDEuOTE2OCBsIDEuMTQwNiwyLjIyODMgYyAwLjAyNiwwLjA0OSAwLjAzMTUsMC4xMDYzIDAuMDE1NCwwLjE1OTQgLTAuMDE2MSwwLjA1MyAtMC4wNTI2LDAuMDk3NiAtMC4xMDE1LDAuMTIzOSAtMC4wMjkxLDAuMDE0OCAtMC4wNjEzLDAuMDIyNSAtMC4wOTQsMC4wMjI1IC0wLjAzMjYsMCAtMC4wNjQ4LC0wLjAwNzcgLTAuMDkzOSwtMC4wMjI1IGwgLTEuNDA1MSwtMC42MzY3IGMgLTAuMDc5NiwwLjcyNTggLTAuMTYyNSwxLjQ1MTYgLTAuMjQyMSwyLjE3NzQgMCwwLjE5MSAtMC4zMTg2LDAuMTgxNSAtMC4zOTgzLDAuMDczMiBsIC0wLjk1NTgsLTEuOTI5IC0xLjI3NDQsMS44ODEzIGMgLTAuMDkyNCwwLjEzMzcgLTAuMzkxOSwwLjAyMjMgLTAuMzg1NSwtMC4xMjEgMCwtMC43MzUzIDAsLTEuNDY3NSAwLjAyMjMsLTIuMjAyOCBsIC0xLjQ4MTUsMC4xNjU1IGMgLTAuMDI4NSwwLjAwMTMgLTAuMDU2OSwtMC4wMDMgLTAuMDgzNywtMC4wMTI4IC0wLjAyNjcsLTAuMDA5NyAtMC4wNTEzLC0wLjAyNDYgLTAuMDcyNCwtMC4wNDM4IC0wLjAyMSwtMC4wMTkyIC0wLjAzOCwtMC4wNDI0IC0wLjA1LC0wLjA2ODEgLTAuMDEyMSwtMC4wMjU4IC0wLjAxODksLTAuMDUzOCAtMC4wMjAxLC0wLjA4MjIgLTAuMDAxNiwtMC4wMjkzIDAuMDAzLC0wLjA1ODYgMC4wMTM0LC0wLjA4NiAwLjAxMDQsLTAuMDI3NCAwLjAyNjUsLTAuMDUyMyAwLjA0NzEsLTAuMDczMiAwLDAgMS44NjcsLTEuNjk2NiAyLjM5NTksLTMuMjk3OCAwLjUyODksLTEuNjAxMiAwLjMxODYsLTUuNDg0OCAwLjMxODYsLTUuNDk3NSAwLjU2MDgsMC45NTQ5IDAuMzQ0MSw0LjgyOSAwLjA3OTcsNS42MzEyIC0wLjM5NTEsMS4xOTA1IC0xLjQ2NTYsMi40MTI5IC0yLjA3NDEsMy4wNDMyIGwgMS4zNTA4LC0wLjE0OTYgYyAwLDAuNjU4OSAwLDEuMzIxIC0wLjAyMjMsMS45OCBsIDEuMjk5OSwtMS45MSBjIDAuMzE4NiwwLjYzNjYgMC42MzcyLDEuMjczMyAwLjk1NTgsMS45MzIyIGwgMC4yMjk0LC0yLjAzNDEgMS4zOTU1LDAuNjA4IC0wLjg5ODQsLTEuNzUzOSBjIDAuMDAzMiwtMC4wMjk1IC0wLjAwNDgsLTAuMDU5IC0wLjAyMjMsLTAuMDgyOCAtMC4wMjU1LC0wLjM3MjUgMC40MjY5LC0xLjI0MTUgMC45MzAzLC0yLjIwNiAwLjUwMzQsLTAuOTY0NiAxLjEwNTUsLTIuMTIwMSAxLjIyMzQsLTIuNzg1NCAwLjIwMDcsLTEuMTE3MyAtMC43NzQyLC00LjE3MzMgLTEuMDM1NCwtNC45NjI3IC0yLjQ5ODEsMC42Mjc0IC01LjA5MjEsMC43Nzk2IC03LjY0NjUsMC40NDg4IC0yLjU4MTcsLTAuMzA2NSAtNS4wOTYzLC0xLjAzMDEgLTcuNDQ1OCwtMi4xNDIzIC0wLjQzMDEsMC43MzIxIC0yLjExNTUsMy44ODM2IC0xLjU5Myw3LjQ5OTggdiAwLjEwNSBsIC0wLjA3MzMsMC4wNzMyIGMgMCwwIC00LjM0NTcsNC4zOTMgLTIuNTk2Niw3Ljc3NjggLTAuMDIyMiwtMC43NDU0IDAuMDIzNiwtMS40OTEzIDAuMTM3LC0yLjIyODMgMC4wMjkzLC0wLjE5MDYgMC4wODg0LC0wLjM3NTQgMC4xNzUzLC0wLjU0NzUgMC4xMjQyLC0wLjIxNjUgMC4yODk5LC0wLjI5NjEgMC41MDAyLC0wLjE4MTUgMC4xNDM4LDAuMDk5IDAuMjU0OCwwLjIzODcgMC4zMTg2LDAuNDAxMSAwLjcyOTYsMS40Mzg4IDAuODk1Myw0LjUwNDMgMC44OTg0LDQuNTEzOSAwLjAyMjMsMC4yMTAxIC0wLjMxODYsMC41MjUyIC0wLjQyMzcsMC4wMjU1IDAsMCAtMC4xNjI1LC0yLjk4OTEgLTAuODUzOSwtNC4zNDg0IC0wLjAyODcsLTAuMDU3OSAtMC4wNjA2LC0wLjExNDMgLTAuMDk1NSwtMC4xNjg3IC0wLjA1MTYsMC4xMjM4IC0wLjA4OSwwLjI1MyAtMC4xMTE2LDAuMzg1MiAtMC4xMjczLDAuODUxMSAtMC4xNjI2LDEuNzEzNCAtMC4xMDUxLDIuNTcyMSAwLjAyMjMsMC4yMSAtMC4wNDc4LDAuMzE4MyAtMC4yMTAzLDAuMzE4MyAtMC4xNjI1LDAgLTAuMzYsLTAuMjEzMyAtMC42MzcyLC0wLjU1NzEgbCAtMC4wMDE2LC0wLjAwMiBjIC0wLjcwMTUsLTAuODY5OCAtMi4xODUsLTIuNTIxMiAtMy41MzQ5LC0yLjE0MDMgMC4wODQ5LDAuMTMxMSAyLjE0MSwyLjA5MTQgMi4wOTMzLDIuODY0OSB2IDAuMzg1MiBsIC0wLjMxODcsLTAuMTkxIGMgMCwwIC0yLjEzNjIsLTAuOTY5OCAtMy4zMDcsLTAuNzcwNCAwLjA2NjUsMC4xMzA3IDIuMDQ4NiwxLjMyNzUgMi42MTg5LDEuMzM3IDAuMjk5NSwwLjEzMDUgMC4yNDIxLDAuMzg1MiAwLjAyNTUsMC40MjM0IC0wLjY0NTIsMC4wNTA5IC0xLjc1NzIsMC4zMzgzIC0xLjg3NjYsMC40NDg4IDAuMTY0MiwwLjE3MzkgMy41MDQ2LDAuNjAxNyAzLjk1NywxLjE0MjggMCwwIDAuMDMxNiwwLjAzODUgMC4wODksMC4xMDE1IDAuMzQ1NSwwLjM3ODkgMS42MjY2LDEuNjQ0NyAyLjU5MzcsMC43NTQ4IDAuMDcwMSwtMC4wODU5IDAuNjE0OSwtMC43ODYyIDAuNTY3MSwtMS4xNjE5IGwgMC4wMTkxLC0wLjExNzcgYyAwLjc1NTEsLTEuNTcyNiAzLjYwNjYsLTMuNzExNyA0LjM5MzUsLTIuNTQ2NyAtMC40NjA5LC0wLjA0NTUgLTAuOTI2MywwLjAwOTkgLTEuMzYzNiwwLjE2MjQgLTAuMDg2NiwxLjI2OTMgLTAuNDg2NywyLjQ5NzQgLTEuMTY0NCwzLjU3NDUgLTAuNjc3NywxLjA3NzEgLTEuNjEyLDEuOTY5NyAtMi43MTk0LDIuNTk3OCAtMS4xMTY2LDAuNjMwMiAtMi4zNjk0LDAuOTgwOCAtMy42NTExLDEuMDIxOSAtMS4zMTg3LDAuMDQ0NCAtMi42MjcyLC0wLjI0NDcgLTMuODA0MiwtMC44NDA0IC0xLjkxMTYsLTAuOTcwOSAtMy42MzIzLC0yLjg1MjQgLTQuNTg0OSwtNS42NzI4IDAuNTUxMiw0LjExNiAyLjQzOTMsNi45MTA1IDQuOTgsOC40NjQ1IDAuNTAyNywwLjMwNzUgMS40OTgyLDAuNzIxNCAxLjQ5ODIsMC43MjE0IHoiCiAgIGlkPSJGaWxsXzUiIC8+CjxsaW5lYXJHcmFkaWVudAogICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgaWQ9IkxpbmVhckdyYWRpZW50XzQiCiAgIHgxPSIzMS4xOTYxIgogICB4Mj0iMzEuMTk2MSIKICAgeTE9IjYxLjM3NjQ5OSIKICAgeTI9IjEuODA0OTk5OSI+CjxzdG9wCiAgIG9mZnNldD0iMCIKICAgc3RvcC1jb2xvcj0iIzdiZDVmNSIKICAgaWQ9InN0b3A1NjkiIC8+CjxzdG9wCiAgIG9mZnNldD0iMSIKICAgc3RvcC1jb2xvcj0iI2RjY2ZlNSIKICAgaWQ9InN0b3A1NzEiIC8+CjwvbGluZWFyR3JhZGllbnQ+CjxwYXRoCiAgIGQ9Im0gMTguNzYzMiwxNC43OTA0IGMgMC4wMjg2LC0wLjEzMDUgLTAuNjgwOSwyLjE0OTIgLTEuMDMzMiw2LjAzMDYgMC4wODYsMS42MDA3IDAuNzY2OCwzLjUxMDggMS4zMTE0LDQuNjM0MiAwLjk0ODQsMS42NjQxIDIuMjc1NiwzLjA4MTggMy44NzQyLDQuMTM4MyAyLjY5ODYsMS44ODQ1IDYuMjUxLDMuMTY0MSA5Ljg3NjcsMy41ODExIDMuNjI1NywwLjQxNzEgNy4zMTUxLDAuMDE5MSAxMC4yODQ1LC0xLjQ5MjkgMS42MzQxLC0wLjgxMTQgMy4wNDE3LC0yLjAxNDQgNC4wOTcyLC0zLjUwMTYgMS41MTM0LC0yLjE3NDIgMi4wNzQxLC01LjQyNDMgMS41NzM5LC04LjY1ODUgQyA0OC4yODYsMTYuNTYxMSA0Ni45NDE1LDEzLjYwMzkgNDQuNTgwNiwxMS41MTU3IDQzLjY2NjIsMTAuNjc1MyAzOS4xNzA3LDcuODA3MTQgMzMuMzI3Niw3LjUyMzgzIDI5LjQ3MDgsNy4zMjgzMyAyNS42NTA0LDguMzUxOTQgMjIuNDA5LDEwLjQ0OTMgYyAwLDAgLTMuMDM5MiwyLjk5ODcgLTMuNTQ5Niw0LjEzIC0wLjAzMTIsMC4wNjkxIDEuMDE4OCwtMS4zNTc5IC0wLjA5NjIsMC4yMTExIHoiCiAgIGlkPSJGaWxsXzYiIC8+CjxsaW5lYXJHcmFkaWVudAogICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgaWQ9IkxpbmVhckdyYWRpZW50XzUiCiAgIHgxPSIzMS4xOTYxIgogICB4Mj0iMzEuMTk2MSIKICAgeTE9IjYxLjM3NjQ5OSIKICAgeTI9IjEuODA0OTk5OSI+CjxzdG9wCiAgIG9mZnNldD0iMCIKICAgc3RvcC1jb2xvcj0iIzdiZDVmNSIKICAgaWQ9InN0b3A1NzUiIC8+CjxzdG9wCiAgIG9mZnNldD0iMSIKICAgc3RvcC1jb2xvcj0iI2RjY2ZlNSIKICAgaWQ9InN0b3A1NzciIC8+CjwvbGluZWFyR3JhZGllbnQ+CjxwYXRoCiAgIGQ9Im0gMTAuODY5MSwyMS4yOTM4IGMgMi40ODIxLC0xLjU5MSA1Ljk2NTIsLTIuMzUzMiA5Ljk3MDQsLTEuOTgzNyAwLjI0NTMsMC4yOTkzIDAuNTMwOCwwLjYwNTQgMC42ODA1LDAuNzY3NyAtMC40MzAxLDAuMzg4NCAtMS40OTQyLDEuNDUxNiAtMS4xODIsMi4yMjgzIDAuMDA2NCwwLjAzOSAwLjAwNjQsMC4wNzg4IDAsMC4xMTc4IDAsMC40MTA2IC0wLjMxODYsMS4yNzMzIC0xLjEzNzQsMi4yOTgzIC0wLjgxODgsMS4wMjUgLTIuMjMwMiwyLjE2NzggLTQuNDI1NCwzLjA2MjMgLTIuMjcxNiwwLjkyNjQgLTUuMzkwNzYsMS41OTE3IC05LjYzMTM3LDEuNTYzIDAuNTM1MjYsLTEuMjczMyAyLjgyMjgyLC02LjM2NjUgNS43MTI1NywtOC4wNDA5IHoiCiAgIGlkPSJGaWxsXzciIC8+CjxsaW5lYXJHcmFkaWVudAogICBncmFkaWVudFRyYW5zZm9ybT0idHJhbnNsYXRlKC0wLjA3MDIxMjQsMC4xMjY1MzUpIgogICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgaWQ9IkxpbmVhckdyYWRpZW50XzYiCiAgIHgxPSIzMS4xOTYxIgogICB4Mj0iMzEuMTk2MSIKICAgeTE9IjYxLjM3NjQ5OSIKICAgeTI9IjEuODA0OTk5OSI+CjxzdG9wCiAgIG9mZnNldD0iMCIKICAgc3RvcC1jb2xvcj0iIzdiZDVmNSIKICAgaWQ9InN0b3A1ODEiIC8+CjxzdG9wCiAgIG9mZnNldD0iMSIKICAgc3RvcC1jb2xvcj0iI2RjY2ZlNSIKICAgaWQ9InN0b3A1ODMiIC8+CjwvbGluZWFyR3JhZGllbnQ+CjxwYXRoCiAgIGQ9Im0gMTIuNTQ4OSwxMi4yMzMxIGMgNS4xMDgsMy45MDUzIDguMTUwNSwzLjQ1ODEgOC43MjY2LDMuNjU0NiAyLjQzMDUsLTAuMzI5IDAuODg1NywtNS4zNDQ5IDAuODg1NywtNS4zNDQ5IGwgLTAuMTAyLC0wLjIxOTcgQyAyMi4wNTQsMTAuMzE0MyAyMS4xNzk3LDguMzU3OTcgMTguMzgxNyw2LjM4NjMzIDE2LjEwNTcsNC43ODI1MiAxMi41NTY5LDMuMTY4NiA3LjE2NzcyLDIuNTg0NTkgNy4zNzQ4MSwzLjg2NzQ1IDguNTA5MDQsOS40NzMxOSAxMi41NDg5LDEyLjIzMzEgWiIKICAgaWQ9IkZpbGxfOCIgLz4KPGxpbmVhckdyYWRpZW50CiAgIGdyYWRpZW50VHJhbnNmb3JtPSJ0cmFuc2xhdGUoLTAuMDU5ODg5MSwtMC4wMzY5OTk4KSIKICAgZ3JhZGllbnRVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgIGlkPSJMaW5lYXJHcmFkaWVudF83IgogICB4MT0iMzEuMTk2MSIKICAgeDI9IjMxLjE5NjEiCiAgIHkxPSI2MS4zNzY0OTkiCiAgIHkyPSIxLjgwNDk5OTkiPgo8c3RvcAogICBvZmZzZXQ9IjAiCiAgIHN0b3AtY29sb3I9IiM3YmQ1ZjUiCiAgIGlkPSJzdG9wNTg3IiAvPgo8c3RvcAogICBvZmZzZXQ9IjEiCiAgIHN0b3AtY29sb3I9IiNkY2NmZTUiCiAgIGlkPSJzdG9wNTg5IiAvPgo8L2xpbmVhckdyYWRpZW50Pgo8cGF0aAogICBkPSJtIDEyLjQ0NDksMTIuNjUxIGMgLTIuOTI3OTUsLTAuMDYwNSAtNi40OTYzLDAuODcyMiAtMTAuNTUyMTEsMy44ODM1IDEuMjc0NDEsMS4xMzk3IDkuMTQwNzEsNy40ODA3IDE4LjczNzExLDIuMzA3OSAyLjM1NzUsLTEuNTUwNiAxLjkwMTgsLTEuMzY2NCAxLjkxMTMsLTEuMzY2OCAwLjA2NzMsMC4wMTAyIC0wLjY4MzQsLTAuNTYzOCAtMS41NjAzLC0xLjMyNTcgLTIuMjc1NSwtMi4xNTY1IC01LjI0ODcsLTMuMzgzNiAtOC4zODMsLTMuNDk1OCB6IgogICBpZD0iRmlsbF85IiAvPgo8bGluZWFyR3JhZGllbnQKICAgZ3JhZGllbnRUcmFuc2Zvcm09InRyYW5zbGF0ZSgtMC4wNDI4MjY4LC0wLjA0NTY4MikiCiAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICBpZD0iTGluZWFyR3JhZGllbnRfOCIKICAgeDE9IjMxLjE5NjEiCiAgIHgyPSIzMS4xOTYxIgogICB5MT0iNjEuMzc2NDk5IgogICB5Mj0iMS44MDQ5OTk5Ij4KPHN0b3AKICAgb2Zmc2V0PSIwIgogICBzdG9wLWNvbG9yPSIjN2JkNWY1IgogICBpZD0ic3RvcDU5MyIgLz4KPHN0b3AKICAgb2Zmc2V0PSIxIgogICBzdG9wLWNvbG9yPSIjZGNjZmU1IgogICBpZD0ic3RvcDU5NSIgLz4KPC9saW5lYXJHcmFkaWVudD4KPGxpbmVhckdyYWRpZW50CiAgIGdyYWRpZW50VHJhbnNmb3JtPSJ0cmFuc2xhdGUoNC4yMDA2OCwwLjg2ODQ1OSkiCiAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICBpZD0iTGluZWFyR3JhZGllbnRfOSIKICAgeDE9IjMxLjE5NjEiCiAgIHgyPSIzMS4xOTYxIgogICB5MT0iNjEuMzc2NDk5IgogICB5Mj0iMS44MDQ5OTk5Ij4KPHN0b3AKICAgb2Zmc2V0PSIwIgogICBzdG9wLWNvbG9yPSIjN2JkNWY1IgogICBpZD0ic3RvcDU5OCIgLz4KPHN0b3AKICAgb2Zmc2V0PSIxIgogICBzdG9wLWNvbG9yPSIjZGNjZmU1IgogICBpZD0ic3RvcDYwMCIgLz4KPC9saW5lYXJHcmFkaWVudD4KPHBhdGgKICAgZD0ibSAyMy42MTE0LDEyLjg0NjkgYyAtMC4wMDMyLDAgLTEuNzEwOSwwLjU0MTIgLTEuODI1NiwwLjk3NDEgLTAuMTE0NywwLjQzMjkgMC4zODU1LDEuNjU4NSAwLjM4NTUsMS42NTg1IGwgMC4wNTc0LDAuMTQ2NCAtMC4xMjExLDAuMDk4NyBjIC0wLjAwNjQsMC4wMDMyIC0xLjc4MSwxLjQxOTcgLTEuNjUwNCwxLjk5NTkgMC4xNTYxLDAuNjQ2MiAxLjM2NiwxLjkyNTYgMS4zNjYsMS45MjU2IDAsMCAzLjU4MTUsLTAuNjg5MiA0LjI4MzYsLTMuMDA5MSAwLjc2MywtMi41MjA5IC0yLjE4MDQsLTQuNTM0OCAtMi4yNTI5LC00LjU1NzEgLTAuMDcyNSwtMC4wMjIzIC0xLjMzODUsMC4yNjQxIC0wLjI0MjUsMC43NjcgeiIKICAgaWQ9IkZpbGxfMTAiIC8+CjxsaW5lYXJHcmFkaWVudAogICBncmFkaWVudFRyYW5zZm9ybT0idHJhbnNsYXRlKC0wLjA0MDE3NzcsLTAuMDQ3MTE4MikiCiAgIGdyYWRpZW50VW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICBpZD0iTGluZWFyR3JhZGllbnRfMTAiCiAgIHgxPSIzMS4xOTYxIgogICB4Mj0iMzEuMTk2MSIKICAgeTE9IjYxLjM3NjQ5OSIKICAgeTI9IjEuODA0OTk5OSI+CjxzdG9wCiAgIG9mZnNldD0iMCIKICAgc3RvcC1jb2xvcj0iIzdiZDVmNSIKICAgaWQ9InN0b3A2MDQiIC8+CjxzdG9wCiAgIG9mZnNldD0iMSIKICAgc3RvcC1jb2xvcj0iI2RjY2ZlNSIKICAgaWQ9InN0b3A2MDYiIC8+CjwvbGluZWFyR3JhZGllbnQ+CjxsaW5lYXJHcmFkaWVudAogICBncmFkaWVudFRyYW5zZm9ybT0idHJhbnNsYXRlKDAuMzEyNjQyLC0wLjA3OTc5MzUpIgogICBncmFkaWVudFVuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgaWQ9IkxpbmVhckdyYWRpZW50XzExIgogICB4MT0iMzEuMTk2MSIKICAgeDI9IjMxLjE5NjEiCiAgIHkxPSI2MS4zNzY0OTkiCiAgIHkyPSIxLjgwNDk5OTkiPgo8c3RvcAogICBvZmZzZXQ9IjAiCiAgIHN0b3AtY29sb3I9IiM3YmQ1ZjUiCiAgIGlkPSJzdG9wNjA5IiAvPgo8c3RvcAogICBvZmZzZXQ9IjEiCiAgIHN0b3AtY29sb3I9IiNkY2NmZTUiCiAgIGlkPSJzdG9wNjExIiAvPgo8L2xpbmVhckdyYWRpZW50PgoKCgoKPC9kZWZzPgo8ZwogICBpZD0iVW50aXRsZWQiCiAgIHZlY3Rvcm5hdG9yOmxheWVyTmFtZT0iVW50aXRsZWQiPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzYyOSI+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnNjI1Ij4KPHVzZQogICBmaWxsPSJ1cmwoI0xpbmVhckdyYWRpZW50KSIKICAgZmlsbC1ydWxlPSJub256ZXJvIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsIgogICBpZD0idXNlNjE2IgogICBzdHlsZT0iZmlsbDp1cmwoI0xpbmVhckdyYWRpZW50KSIgLz4KPG1hc2sKICAgaGVpZ2h0PSI2LjQ4MjgzIgogICBpZD0iU3Ryb2tlTWFzayIKICAgbWFza1VuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgd2lkdGg9IjEwLjY0MDgiCiAgIHg9IjQ3LjgxNzIiCiAgIHk9IjIwLjU1MzMiPgo8cmVjdAogICBmaWxsPSIjZmZmZmZmIgogICBoZWlnaHQ9IjYuNDgyODMiCiAgIHN0cm9rZT0ibm9uZSIKICAgd2lkdGg9IjEwLjY0MDgiCiAgIHg9IjQ3LjgxNzIiCiAgIHk9IjIwLjU1MzMwMSIKICAgaWQ9InJlY3Q2MTgiIC8+Cjx1c2UKICAgZmlsbD0iIzAwMDAwMCIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsIgogICBpZD0idXNlNjIwIiAvPgo8L21hc2s+Cjx1c2UKICAgZmlsbD0ibm9uZSIKICAgbWFzaz0idXJsKCNTdHJva2VNYXNrKSIKICAgc3Ryb2tlPSIjNTUyZjgyIgogICBzdHJva2UtbGluZWNhcD0iYnV0dCIKICAgc3Ryb2tlLWxpbmVqb2luPSJtaXRlciIKICAgc3Ryb2tlLXdpZHRoPSIwLjk2IgogICB4bGluazpocmVmPSIjRmlsbCIKICAgaWQ9InVzZTYyMyIgLz4KPC9nPgo8cGF0aAogICBkPSJtIDU3Ljc0MjMsMjUuNDYxIGMgMCwwIC00LjM1MzMsLTIuODY5NiAtOC43NzU3LC0zLjcxNzYgLTAuNTc1OSwwLjY3NzkgLTEuMTQ3OCwyLjQyNzkgLTAuMDQ2OSwzLjg4MzMgMC43NTIsMC4zODQgNC4yODc2LDIuMDEyNyA4LjgwOTIsLTAuMTUzNyB6IgogICBmaWxsPSIjNzc3YWJhIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg2MjciIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc2NDQiPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzY0MCI+Cjx1c2UKICAgZmlsbD0idXJsKCNMaW5lYXJHcmFkaWVudF8yKSIKICAgZmlsbC1ydWxlPSJub256ZXJvIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzIiCiAgIGlkPSJ1c2U2MzEiCiAgIHN0eWxlPSJmaWxsOnVybCgjTGluZWFyR3JhZGllbnRfMikiIC8+CjxtYXNrCiAgIGhlaWdodD0iNy41MzEyNyIKICAgaWQ9IlN0cm9rZU1hc2tfMiIKICAgbWFza1VuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgd2lkdGg9IjE0LjAzMjIiCiAgIHg9IjQ3LjE5MDQiCiAgIHk9IjEzLjkyNjIiPgo8cmVjdAogICBmaWxsPSIjZmZmZmZmIgogICBoZWlnaHQ9IjcuNTMxMjciCiAgIHN0cm9rZT0ibm9uZSIKICAgd2lkdGg9IjE0LjAzMjIiCiAgIHg9IjQ3LjE5MDM5OSIKICAgeT0iMTMuOTI2MiIKICAgaWQ9InJlY3Q2MzMiIC8+Cjx1c2UKICAgZmlsbD0iIzAwMDAwMCIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzIiCiAgIGlkPSJ1c2U2MzUiIC8+CjwvbWFzaz4KPHVzZQogICBmaWxsPSJub25lIgogICBtYXNrPSJ1cmwoI1N0cm9rZU1hc2tfMikiCiAgIHN0cm9rZT0iIzU1MmY4MiIKICAgc3Ryb2tlLWxpbmVjYXA9ImJ1dHQiCiAgIHN0cm9rZS1saW5lam9pbj0ibWl0ZXIiCiAgIHN0cm9rZS13aWR0aD0iMC45NiIKICAgeGxpbms6aHJlZj0iI0ZpbGxfMiIKICAgaWQ9InVzZTYzOCIgLz4KPC9nPgo8cGF0aAogICBkPSJtIDU5LjY1OTMsMTUuMjM5NiBjIDAsMCAtNi42NjY5LDIuNTY1MyAtMTEuNjMwMSwxLjQ3NzMgLTEuMDc2NCwyLjI2MzUgMC40MjA1LDMuMjkyMSAxLjMzNzUsMy45NDA1IDAuODU3NiwwLjI5MTIgNi4wNzQzLDEuNzE4OCAxMS4yNTgzLC00Ljk1IC0wLjMwODYsLTAuMTY4OSAtMC42MjcsLTAuMzQ5NyAtMC45NTc1LC0wLjQ3MDUgeiIKICAgZmlsbD0iIzc3N2FiYSIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNjQyIiAvPgo8L2c+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnNjU5Ij4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc2NTUiPgo8dXNlCiAgIGZpbGw9InVybCgjTGluZWFyR3JhZGllbnRfMykiCiAgIGZpbGwtcnVsZT0ibm9uemVybyIKICAgc3Ryb2tlPSJub25lIgogICB4bGluazpocmVmPSIjRmlsbF8zIgogICBpZD0idXNlNjQ2IgogICBzdHlsZT0iZmlsbDp1cmwoI0xpbmVhckdyYWRpZW50XzMpIiAvPgo8bWFzawogICBoZWlnaHQ9IjEwLjYwMjUiCiAgIGlkPSJTdHJva2VNYXNrXzMiCiAgIG1hc2tVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgIHdpZHRoPSIxNS42NDM3IgogICB4PSI0NC41Mzg0IgogICB5PSI1Ljc3OTkiPgo8cmVjdAogICBmaWxsPSIjZmZmZmZmIgogICBoZWlnaHQ9IjEwLjYwMjUiCiAgIHN0cm9rZT0ibm9uZSIKICAgd2lkdGg9IjE1LjY0MzciCiAgIHg9IjQ0LjUzODM5OSIKICAgeT0iNS43Nzk5MDAxIgogICBpZD0icmVjdDY0OCIgLz4KPHVzZQogICBmaWxsPSIjMDAwMDAwIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIHN0cm9rZT0ibm9uZSIKICAgeGxpbms6aHJlZj0iI0ZpbGxfMyIKICAgaWQ9InVzZTY1MCIgLz4KPC9tYXNrPgo8dXNlCiAgIGZpbGw9Im5vbmUiCiAgIG1hc2s9InVybCgjU3Ryb2tlTWFza18zKSIKICAgc3Ryb2tlPSIjNTUyZjgyIgogICBzdHJva2UtbGluZWNhcD0iYnV0dCIKICAgc3Ryb2tlLWxpbmVqb2luPSJtaXRlciIKICAgc3Ryb2tlLXdpZHRoPSIwLjk2IgogICB4bGluazpocmVmPSIjRmlsbF8zIgogICBpZD0idXNlNjUzIiAvPgo8L2c+CjxwYXRoCiAgIGQ9Im0gNTkuNTk3LDYuMjk0ODMgYyAwLDAgLTYuOTc0MSwwLjY1MTc2IC0xMy4zNzQxLDguMjkwMTcgMC41NTg4LDAuNjQzNiAwLjk0MiwwLjczMzggMS45NTEsMS4yNDg0IDEwLjIyMDgsLTIuNDU3NiAxMS4yNTk3LC04LjI4NjY0IDExLjQzMzMsLTkuNTI0MDIgeiIKICAgZmlsbD0iIzc3N2FiYSIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNjU3IiAvPgo8L2c+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnNjg5Ij4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc2NzAiPgo8dXNlCiAgIGZpbGw9IiM3NzdhYmEiCiAgIGZpbGwtcnVsZT0ibm9uemVybyIKICAgc3Ryb2tlPSJub25lIgogICB4bGluazpocmVmPSIjRmlsbF80IgogICBpZD0idXNlNjYxIiAvPgo8bWFzawogICBoZWlnaHQ9IjIxLjEzMzEiCiAgIGlkPSJTdHJva2VNYXNrXzQiCiAgIG1hc2tVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgIHdpZHRoPSIyNi41MjM2IgogICB4PSI3LjAxNjUzIgogICB5PSI0MC40MzY5Ij4KPHJlY3QKICAgZmlsbD0iI2ZmZmZmZiIKICAgaGVpZ2h0PSIyMS4xMzMxMDEiCiAgIHN0cm9rZT0ibm9uZSIKICAgd2lkdGg9IjI2LjUyMzYiCiAgIHg9IjcuMDE2NTMiCiAgIHk9IjQwLjQzNjkwMSIKICAgaWQ9InJlY3Q2NjMiIC8+Cjx1c2UKICAgZmlsbD0iIzAwMDAwMCIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzQiCiAgIGlkPSJ1c2U2NjUiIC8+CjwvbWFzaz4KPHVzZQogICBmaWxsPSJub25lIgogICBtYXNrPSJ1cmwoI1N0cm9rZU1hc2tfNCkiCiAgIHN0cm9rZT0iIzU1MmY4MiIKICAgc3Ryb2tlLWxpbmVjYXA9ImJ1dHQiCiAgIHN0cm9rZS1saW5lam9pbj0ibWl0ZXIiCiAgIHN0cm9rZS13aWR0aD0iMC45NiIKICAgeGxpbms6aHJlZj0iI0ZpbGxfNCIKICAgaWQ9InVzZTY2OCIgLz4KPC9nPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzY4MSI+Cjx1c2UKICAgZmlsbD0idXJsKCNMaW5lYXJHcmFkaWVudF80KSIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzUiCiAgIGlkPSJ1c2U2NzIiCiAgIHN0eWxlPSJmaWxsOnVybCgjTGluZWFyR3JhZGllbnRfNCkiIC8+CjxtYXNrCiAgIGhlaWdodD0iMjcuOTMzOCIKICAgaWQ9IlN0cm9rZU1hc2tfNSIKICAgbWFza1VuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgd2lkdGg9IjQwLjU5OTQiCiAgIHg9IjEwLjIwNzQiCiAgIHk9IjMwLjg2OSI+CjxyZWN0CiAgIGZpbGw9IiNmZmZmZmYiCiAgIGhlaWdodD0iMjcuOTMzOCIKICAgc3Ryb2tlPSJub25lIgogICB3aWR0aD0iNDAuNTk5NCIKICAgeD0iMTAuMjA3NCIKICAgeT0iMzAuODY4OTk5IgogICBpZD0icmVjdDY3NCIgLz4KPHVzZQogICBmaWxsPSIjMDAwMDAwIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIHN0cm9rZT0ibm9uZSIKICAgeGxpbms6aHJlZj0iI0ZpbGxfNSIKICAgaWQ9InVzZTY3NiIgLz4KPC9tYXNrPgo8dXNlCiAgIGZpbGw9Im5vbmUiCiAgIG1hc2s9InVybCgjU3Ryb2tlTWFza181KSIKICAgc3Ryb2tlPSIjNTUyZjgyIgogICBzdHJva2UtbGluZWNhcD0iYnV0dCIKICAgc3Ryb2tlLWxpbmVqb2luPSJtaXRlciIKICAgc3Ryb2tlLXdpZHRoPSIwLjk2IgogICB4bGluazpocmVmPSIjRmlsbF81IgogICBpZD0idXNlNjc5IiAvPgo8L2c+CjxwYXRoCiAgIGQ9Im0gMjMuNjk3NSwzNi40MDczIGMgLTAuMDk2MSwwLjg1OSAtMC4wODMyLDEuNzI2NiAwLjAzODQsMi41ODI0IHYgMC4xMDU2IGwgLTAuMDczNiwwLjA3MzYgYyAwLDAgLTMuOTIsMy45NjQ4IC0yLjg0NDgsNy4yNzM2IC0wLjM1NTIsLTIuMzI5NiAxLjkyLC01LjQ3MiAzLjQ2MjQsLTcuMTg3MiAtMC4yNTkyLC0wLjkwMjQgLTAuMzIsLTMuOTcxMiAtMC4yNzg0LC00LjQ1MTIgLTAuMTQ2NCwwLjUyMzYgLTAuMjQ3LDEuMDU5IC0wLjMwMDgsMS42IHoiCiAgIGZpbGw9IiM3NzdhYmEiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDY4MyIgLz4KPHBhdGgKICAgZD0ibSAyNS4yMDExLDM3LjA3MjIgYyAwLjY3NTIsMi4wMTI4IDIuMTAyNCw0LjE2IDIuODgsNS4yNzM2IDAuNDczNiwwLjcwNCAwLjgxNiwxLjIxMjggMC44MzIsMS40NTkyIDAuMDM1MiwwLjUyNDggLTAuNzc3NiwxLjQxNDQgLTEuMjgsMS45MiAwLDAgMS43NTA0LC0wLjg1NzYgMS42LC0yLjI3MiAwLDAgLTMuNTg3MiwtNS44MDggLTMuMzk4NCwtNi44MTI4IDAsMCAwLjU0NzIsLTEuNjk5MiAwLjg4OTYsLTEuOTc0NCAwLDAgLTEuNzEyLDAuOTM0NCAtMS41MDA4LDIuNDEyOCB6IgogICBmaWxsPSIjNzc3YWJhIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg2ODUiIC8+CjxwYXRoCiAgIGQ9Im0gMzYuOTk1OCwzNS44MzA1IGMgMC41NjMyLDAuOTYgMC4zNDU2LDQuODUxMiAwLjA3NjgsNS42NTc2IC0wLjM5NjgsMS4yIC0xLjQ3MiwyLjQyODggLTIuMDgzMiwzLjA2MjQgMS4yMTYsLTAuNTEyIDIuNTEyLC0zLjA5NzYgMi41MTIsLTMuMDk3NiAwLjI1OTIsLTEuNjggMC41MTUyLC00LjE2IC0wLjUwNTYsLTUuNjIyNCB6IgogICBmaWxsPSIjNzc3YWJhIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg2ODciIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc3MDQiPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzcwMCI+Cjx1c2UKICAgZmlsbD0idXJsKCNMaW5lYXJHcmFkaWVudF81KSIKICAgZmlsbC1ydWxlPSJub256ZXJvIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzYiCiAgIGlkPSJ1c2U2OTEiCiAgIHN0eWxlPSJmaWxsOnVybCgjTGluZWFyR3JhZGllbnRfNSkiIC8+CjxtYXNrCiAgIGhlaWdodD0iMjYuNzg5OCIKICAgaWQ9IlN0cm9rZU1hc2tfNiIKICAgbWFza1VuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgd2lkdGg9IjMyLjE1NzMiCiAgIHg9IjE3LjI0ODkiCiAgIHk9IjcuMDIwMjQiPgo8cmVjdAogICBmaWxsPSIjZmZmZmZmIgogICBoZWlnaHQ9IjI2Ljc4OTgwMSIKICAgc3Ryb2tlPSJub25lIgogICB3aWR0aD0iMzIuMTU3Mjk5IgogICB4PSIxNy4yNDg4OTkiCiAgIHk9IjcuMDIwMjM5OCIKICAgaWQ9InJlY3Q2OTMiIC8+Cjx1c2UKICAgZmlsbD0iIzAwMDAwMCIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzYiCiAgIGlkPSJ1c2U2OTUiIC8+CjwvbWFzaz4KPHVzZQogICBmaWxsPSJub25lIgogICBtYXNrPSJ1cmwoI1N0cm9rZU1hc2tfNikiCiAgIHN0cm9rZT0iIzU1MmY4MiIKICAgc3Ryb2tlLWxpbmVjYXA9ImJ1dHQiCiAgIHN0cm9rZS1saW5lam9pbj0ibWl0ZXIiCiAgIHN0cm9rZS13aWR0aD0iMC45NiIKICAgeGxpbms6aHJlZj0iI0ZpbGxfNiIKICAgaWQ9InVzZTY5OCIgLz4KPC9nPgo8cGF0aAogICBkPSJNIDM4LjEzNjUsMzMuMTMzMSBDIDIyLjM5NTcsMzEuODkxNSAyMC44OTQ4LDIyLjY2MjMgMjAuODUsMjIuMzU1MSBjIC0yLjEzNDUsLTEuMzkwNyAtMy4wMTc3LDAuNTYzOCAtMS44MDQ1LDMuMTczNiAwLjk1MTYsMS42NzM2IDIuMzE5LDMuMDY5OCAzLjkyNTQsNC4xMzA5IDIuOTc4MiwxLjk4ODggNi4zNjg2LDMuMTM0NyA5LjkyODYsMy41MjM2IDEuNzQ5MiwwLjIxNDQgMy41MDA3LDAuMTgzOCA1LjI0OTksLTAuMDMwNiB6IgogICBmaWxsPSIjNzc3YWJhIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3MDIiIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc3MTAiPgo8cGF0aAogICBkPSJtIDMyLjM5NDUsMjguNzk5OCBjIDEuMTIsMS4xMTY4IDkuNTEwNCwxLjAxNDQgOS45NTg0LDAuMDIyNCAtMiw1LjYxMjggLTkuNDE0NCwzLjI2NCAtOS45NTg0LC0wLjAyMjQgeiIKICAgZmlsbD0iIzU1MmY4MiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzA2IiAvPgo8cGF0aAogICBkPSJtIDQwLjY0MDUsMzAuNzE5NSBjIC0wLjA3NjgsMC40MTI4IC0zLjM2MzIsMi4yMTQ0IC02LjA0NDgsMC4xMTIgMCwwIDEuNzk1MiwtMS4xMiA2LjA0NDgsLTAuMTEyIHoiCiAgIGZpbGw9IiNjM2EzY2QiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDcwOCIgLz4KPC9nPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzcxNiI+CjxwYXRoCiAgIGQ9Im0gNDAuMDczLDI2LjY2MjQgYyAtMC4yMzQyLDAuMjk4NSAtMC40MjU5LDAuNjI4MSAtMC41Njk2LDAuOTc5MiAtMC4wMzIsMC4yNDMyIDAuNDY3MiwtMC41Mzc2IDEuMTM5MiwtMC41ODU2IDAuMTMsLTAuMDE1NSAwLjI1NDcsLTAuMDYwNCAwLjM2NDgsLTAuMTMxMiAwLjA1NDEsLTAuMDQzOCAwLjA5MjQsLTAuMTA0IDAuMTA5MiwtMC4xNzE2IDAuMDE2NywtMC4wNjc2IDAuMDExLC0wLjEzODggLTAuMDE2NCwtMC4yMDI4IC0wLjA0MzcsLTAuMDY3OCAtMC4xMDMyLC0wLjEyMzkgLTAuMTczNSwtMC4xNjM1IC0wLjA3MDIsLTAuMDM5NiAtMC4xNDkxLC0wLjA2MTQgLTAuMjI5NywtMC4wNjM3IC0wLjEyNDMsMC4wMDk1IC0wLjI0NTMsMC4wNDQ1IC0wLjM1NTQsMC4xMDI5IC0wLjExMDEsMC4wNTgzIC0wLjIwNywwLjEzODggLTAuMjg0NiwwLjIzNjMgeiIKICAgZmlsbD0iIzU1MmY4MiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzEyIiAvPgo8cGF0aAogICBkPSJtIDM3LjQzOTksMjcuNjYzNSBjIC0wLjEzNjIsLTAuMzk5NSAtMC4zMzAzLC0wLjc3NjggLTAuNTc2LC0xLjEyIC0wLjA3NDQsLTAuMTA1OCAtMC4xNjk1LC0wLjE5NTYgLTAuMjc5NSwtMC4yNjM3IC0wLjExLC0wLjA2ODIgLTAuMjMyNiwtMC4xMTM1IC0wLjM2MDUsLTAuMTMzMSAtMC4wOTU5LC0wLjAwMjggLTAuMTkwOSwwLjAxOSAtMC4yNzYsMC4wNjMzIC0wLjA4NTIsMC4wNDQyIC0wLjE1NzYsMC4xMDk0IC0wLjIxMDQsMC4xODk1IC0wLjAzODQsMC4wNjcyIC0wLjA1MTIsMC4xNDYxIC0wLjAzNTksMC4yMjIgMC4wMTUzLDAuMDc1OSAwLjA1NzYsMC4xNDM3IDAuMTE5MSwwLjE5MDggMC4xMTg2LDAuMDg0NSAwLjI1NTgsMC4xMzk0IDAuNCwwLjE2IDAuNzQ4OCwwLjA3NjggMS4yNTQ0LDAuOTYgMS4yMzUyLDAuNjkxMiB6IgogICBmaWxsPSIjNTUyZjgyIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3MTQiIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc3MjYiPgo8cGF0aAogICBkPSJtIDQzLjEwOCwxOC41Njg2IGMgMC43MzI4LC0xLjk2NjQgMi4yNzMsLTIuMTU1MyAzLjQ3NTMsLTAuNDI2OSAwLjY0NzMsMSAxLjA0OTEsMi4xMzQzIDEuMTczOCwzLjMxMzQgMC4xNzY5LDEuMTczOCAwLjA3MjEsMi4zNzIgLTAuMzA1OSwzLjQ5ODkgLTAuNzExNCwxLjk2MjggLTIuMjczLDIuMTUxOCAtMy40NzUzLDAuNDI2OCAtMC42NDQyLC0xLjAwMTQgLTEuMDQ1OCwtMi4xMzUgLTEuMTczOCwtMy4zMTM0IC0wLjE3MzUsLTEuMTczOSAtMC4wNjg4LC0yLjM3MTMgMC4zMDU5LC0zLjQ5ODggeiBtIDEuOTEzNywwLjY0NzIgYyAtMC4zNTU3LDAuMDUyNSAtMC42NTQ1LDAuMzkxOSAtMC44MzU5LDAuODk1NyAtMC4zNzM1LDEuMDQ5NyAtMC4yMzgzLDIuNjk0MiAwLjQwMiwzLjYyODQgMC42NDAyLDAuOTM0MiAxLjQyMjgsMC42OTk3IDEuNzc4NSwtMC4zNDk5IDAuMzU1NywtMS4wNDk3IDAuMjM4MywtMi42OTA2IC0wLjQwMTksLTMuNjI4MyAtMC4wODY4LC0wLjE3MzMgLTAuMjIyNiwtMC4zMTgzIC0wLjM5MTEsLTAuNDE3NiAtMC4xNjg0LC0wLjA5OTMgLTAuMzYyNCwtMC4xNDg3IC0wLjU1ODcsLTAuMTQyMyB6IgogICBmaWxsPSIjNTUyZjgyIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3MTgiIC8+CjxwYXRoCiAgIGQ9Im0gNDMuMzQ2NSwxOC44ODA0IGMgMC42NTkyLC0xLjc5ODQgMi4wNDQ4LC0xLjk3MTIgMy4xMjY0LC0wLjM5MDQgMC41ODIzLDAuOTE0NSAwLjk0MzgsMS45NTIgMS4wNTYsMy4wMzA0IDAuMTU5MSwxLjA3MzUgMC4wNjQ4LDIuMTY5NCAtMC4yNzUyLDMuMiAtMC42NCwxLjc5NTIgLTIuMDQ0OCwxLjk2OCAtMy4xMjY0LDAuMzkwNCAtMC41Nzk2LC0wLjkxNTkgLTAuOTQwOSwtMS45NTI3IC0xLjA1NiwtMy4wMzA0IC0wLjE1NjEsLTEuMDczNyAtMC4wNjE5LC0yLjE2ODggMC4yNzUyLC0zLjIgeiBtIDEuNzIxNiwwLjU5MiBjIC0wLjMyLDAuMDQ4IC0wLjU4ODgsMC4zNTg0IC0wLjc1MiwwLjgxOTIgLTAuMzM2LDAuOTYgLTAuMjE0NCwyLjQ2NCAwLjM2MTYsMy4zMTg0IDAuNTc2LDAuODU0NCAxLjI4LDAuNjQgMS42LC0wLjMyIDAuMzIsLTAuOTYgMC4yMTQ0LC0yLjQ2MDggLTAuMzYxNiwtMy4zMTg0IC0wLjA3ODEsLTAuMTU4NSAtMC4yMDAzLC0wLjI5MTEgLTAuMzUxOCwtMC4zODE5IC0wLjE1MTUsLTAuMDkwOCAtMC4zMjYxLC0wLjEzNiAtMC41MDI2LC0wLjEzMDEgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzIwIiAvPgo8cGF0aAogICBkPSJtIDQ0Ljc2NzgsMjMuNzU0IGMgLTAuNjgxNiwtMS4wMTc2IC0wLjgyNTYsLTIuODM1MiAtMC40Mjg4LC0zLjk1ODQgMC4zNjE2LC0xLjAyNzIgMS4wODQ4LC0xLjI2MDggMS42OTkyLC0wLjM0MjQgMC42ODQ4LDEuMDE3NiAwLjgyODgsMi44MzUyIDAuNDMyLDMuOTU4NCAtMC4zNjQ4LDEuMDI3MiAtMS4wODQ4LDEuMjYwOCAtMS43MDI0LDAuMzQyNCB6IgogICBmaWxsPSIjNTUyZjgyIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3MjIiIC8+CjxwYXRoCiAgIGQ9Im0gNDQuOTQ0OSwxOC4wNzYzIGMgLTAuNDY0LDAuMDQxNiAtMC43NzQ0LDAuNzgwOCAtMC42OTEyLDEuNjUxMiAwLjA4MzIsMC44NzA0IDAuNTI0OCwxLjUzMjggMC45ODg4LDEuNDkxMiAwLjQ2NCwtMC4wNDE2IDAuNzcxMiwtMC43ODQgMC42OTEyLC0xLjY1MTIgLTAuMDgsLTAuODY3MiAtMC41MjQ4LC0xLjUzNiAtMC45ODg4LC0xLjQ5MTIgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzI0IiAvPgo8L2c+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnNzM2Ij4KPHBhdGgKICAgZD0ibSAzMi4wMzgxLDE4LjA1IGMgLTAuNzA3OSwtMi4zNjI0IC0yLjU2NiwtMi43NDM3IC00LjE3OTksLTAuODI2OCAtMC44NzQzLDEuMTE3MSAtMS40NjIyLDIuNDEzOSAtMS43MTY2LDMuNzg2NSAtMC4zMTQ3LDEuMzY2MyAtMC4yOTQxLDIuNzgzNSAwLjA2MDIsNC4xNDA5IDAuNzA3OCwyLjM2MjQgMi41NjYsMi43NDM3IDQuMTc5OSwwLjgyMzUgMC44NzM4LC0xLjExOTkgMS40NjE2LC0yLjQxODggMS43MTY2LC0zLjc5MzMgMC4zMTQ2LC0xLjM2NTIgMC4yOTQsLTIuNzgxMiAtMC4wNjAyLC00LjEzNzUgeiBtIC0yLjM3ODQsMC41ODA1IGMgMC40MzE4LDAuMDk3OCAwLjc1NzQsMC41MjMxIDAuOTM0NCwxLjEzMzkgMC4zNTM5LDEuMjUyMSAwLjA0NiwzLjE4OTIgLTAuODEwNSw0LjIzMiAtMC44NTY2LDEuMDQyOCAtMS43Njk3LDAuNjc1IC0yLjEyMzYsLTAuNTYzNiAtMC4zNTQsLTEuMjM4NSAtMC4wNjczLC0zLjE4NTggMC43OTYzLC00LjIyODYgMC4zNTM5LC0wLjQ0NTUgMC43NzUxLC0wLjY3NSAxLjIwMzQsLTAuNTczNyB6IgogICBmaWxsPSIjNTUyZjgyIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3MjgiIC8+CjxwYXRoCiAgIGQ9Im0gMzEuNzQ2NiwxOC4yNTMyIGMgLTAuNjM3MSwtMi4yMjc0IC0yLjMwOTQsLTIuNTg3IC0zLjc2MTksLTAuNzc5NiAtMC43ODY5LDEuMDUzMyAtMS4zMTYsMi4yNzYgLTEuNTQ1LDMuNTcwMiAtMC4yODMyLDEuMjg4MiAtMC4yNjQ2LDIuNjI0MyAwLjA1NDIsMy45MDQyIDAuNjM3MSwyLjIyNzQgMi4zMDk0LDIuNTg3IDMuNzYxOSwwLjc3NjQgMC43ODY1LC0xLjA1NTkgMS4zMTU1LC0yLjI4MDUgMS41NDUsLTMuNTc2NSAwLjI4MzEsLTEuMjg3MSAwLjI2NDYsLTIuNjIyMyAtMC4wNTQyLC0zLjkwMTEgeiBtIC0yLjE0MDYsMC41NDczIGMgMC4zODg2LDAuMDkyMyAwLjY4MTcsMC40OTMyIDAuODQxLDEuMDY5MSAwLjMxODUsMS4xODA1IDAuMDQxNCwzLjAwNyAtMC43Mjk1LDMuOTkwMiAtMC43NzA5LDAuOTgzMiAtMS41OTI3LDAuNjM2NCAtMS45MTEyLC0wLjUzMTQgLTAuMzE4NiwtMS4xNjc4IC0wLjA2MDUsLTMuMDAzOCAwLjcxNjcsLTMuOTg3IDAuMzE4NSwtMC40MiAwLjY5NzYsLTAuNjM2NCAxLjA4MywtMC41NDA5IHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDczMCIgLz4KPHBhdGgKICAgZD0ibSAyOS43NTk1LDIzLjkxNjkgYyAwLjkwODgsLTEuMTYxNiAxLjI0MTYsLTMuMzM3NiAwLjg2MDgsLTQuNzI5NiAtMC4zNDg4LC0xLjI3OTkgLTEuMiwtMS42Mjg3IC0yLjAyMjQsLTAuNTgyMyAtMC45MTIsMS4xNjE1IC0xLjI0NDgsMy4zMzc1IC0wLjg2MDgsNC43Mjk1IDAuMzQ4OCwxLjI4IDEuMTk2OCwxLjYyNTYgMi4wMjI0LDAuNTgyNCB6IgogICBmaWxsPSIjNTUyZjgyIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3MzIiIC8+CjxwYXRoCiAgIGQ9Im0gMjkuOTc4LDE2Ljk3OTMgYyAwLjU2LDAuMDk5MiAwLjg3MzYsMS4wMzA0IDAuNjk3NiwyLjA4IC0wLjE3NiwxLjA0OTYgLTAuNzc0NCwxLjgyMDggLTEuMzM0NCwxLjcyMTYgLTAuNTYsLTAuMDk5MiAtMC44NjA4LC0xLjAzMzYgLTAuNzAwOCwtMi4wODMyIDAuMTYsLTEuMDQ5NiAwLjc3NDQsLTEuODE3NiAxLjMzNzYsLTEuNzE4NCB6IgogICBmaWxsPSIjZmZmZmZmIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3MzQiIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc3NDQiPgo8cGF0aAogICBkPSJtIDUzLjYyNTcsMzYuNjQ5NCBjIDAuNDcwNiwtNmUtNCAwLjkzMDgsMC4xMzgyIDEuMzIyNSwwLjM5OSAwLjM5MTgsMC4yNjA4IDAuNjk3NCwwLjYzMTkgMC44Nzg0LDEuMDY2MyAwLjE4MSwwLjQzNDQgMC4yMjkxLDAuOTEyNyAwLjEzODQsMS4zNzQ1IC0wLjA5MDcsMC40NjE4IC0wLjMxNjMsMC44ODYzIC0wLjY0ODIsMS4yMiAtMC4zMzE4LDAuMzMzNiAtMC43NTUxLDAuNTYxNSAtMS4yMTY0LDAuNjU0NyAtMC40NjEzLDAuMDkzMiAtMC45Mzk5LDAuMDQ3NiAtMS4zNzUzLC0wLjEzMTEgLTAuNDM1MywtMC4xNzg2IC0wLjgwOCwtMC40ODIzIC0xLjA3MDksLTAuODcyNiAtMC4yNjI5LC0wLjM5MDMgLTAuNDA0MiwtMC44NDk4IC0wLjQwNjEsLTEuMzIwNCAtMC4wMDEzLC0wLjMxMzIgMC4wNTkyLC0wLjYyMzUgMC4xNzgxLC0wLjkxMzMgMC4xMTg5LC0wLjI4OTcgMC4yOTM4LC0wLjU1MzIgMC41MTQ3LC0wLjc3NTIgMC4yMjA4LC0wLjIyMjEgMC40ODMzLC0wLjM5ODQgMC43NzI0LC0wLjUxODggMC4yODkxLC0wLjEyMDUgMC41OTkyLC0wLjE4MjcgMC45MTI0LC0wLjE4MzEgeiIKICAgZmlsbD0iIzhiZDRmMyIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzM4IiAvPgo8cGF0aAogICBkPSJtIDUzLjA2OTMsMzcuNDM5NSBjIDAuMDkzNywwIDAuMTg1MiwwLjAyNzcgMC4yNjMxLDAuMDc5OCAwLjA3NzksMC4wNTIgMC4xMzg2LDAuMTI2IDAuMTc0NSwwLjIxMjUgMC4wMzU4LDAuMDg2NiAwLjA0NTIsMC4xODE4IDAuMDI2OSwwLjI3MzYgLTAuMDE4MywwLjA5MTkgLTAuMDYzNCwwLjE3NjMgLTAuMTI5NiwwLjI0MjUgLTAuMDY2MiwwLjA2NjMgLTAuMTUwNiwwLjExMTQgLTAuMjQyNSwwLjEyOTYgLTAuMDkxOSwwLjAxODMgLTAuMTg3MSwwLjAwODkgLTAuMjczNiwtMC4wMjY5IC0wLjA4NjYsLTAuMDM1OCAtMC4xNjA1LC0wLjA5NjYgLTAuMjEyNiwtMC4xNzQ0IC0wLjA1MiwtMC4wNzc5IC0wLjA3OTgsLTAuMTY5NSAtMC4wNzk4LC0wLjI2MzIgLTRlLTQsLTAuMDYyIDAuMDExNCwtMC4xMjM1IDAuMDM0OSwtMC4xODA5IDAuMDIzNCwtMC4wNTc1IDAuMDU4LC0wLjEwOTcgMC4xMDE4LC0wLjE1MzcgMC4wNDM3LC0wLjA0NDEgMC4wOTU3LC0wLjA3OSAwLjE1MywtMC4xMDI4IDAuMDU3MiwtMC4wMjM5IDAuMTE4NywtMC4wMzYxIDAuMTgwNywtMC4wMzYxIHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc0MCIgLz4KPHBhdGgKICAgZD0ibSA1Mi42MTIyLDM4Ljg5MjYgYyAwLjA0NjcsMCAwLjA5MTUsMC4wMTg1IDAuMTI0NSwwLjA1MTUgMC4wMzMsMC4wMzMgMC4wNTE1LDAuMDc3OCAwLjA1MTUsMC4xMjQ1IC0wLjAwMzEsMC4wMjI5IC0wLjAxMDcsMC4wNDQ5IC0wLjAyMjQsMC4wNjQ5IC0wLjAxMTcsMC4wMiAtMC4wMjcyLDAuMDM3NCAtMC4wNDU2LDAuMDUxNCAtMC4wMTg0LDAuMDE0IC0wLjAzOTQsMC4wMjQyIC0wLjA2MTgsMC4wMyAtMC4wMjIzLDAuMDA1OSAtMC4wNDU3LDAuMDA3MiAtMC4wNjg2LDAuMDA0MSAtMC4wMzgyLC0wLjAwNDcgLTAuMDczOCwtMC4wMjIxIC0wLjEwMSwtMC4wNDkzIC0wLjAyNzMsLTAuMDI3MyAtMC4wNDQ2LC0wLjA2MjkgLTAuMDQ5MywtMC4xMDExIC0xZS00LC0wLjA0NjEgMC4wMTgsLTAuMDkwNCAwLjA1MDQsLTAuMTIzNCAwLjAzMjMsLTAuMDMyOSAwLjA3NjIsLTAuMDUxOCAwLjEyMjMsLTAuMDUyNiB6IgogICBmaWxsPSIjZmZmZmZmIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3NDIiIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc3NTIiPgo8cGF0aAogICBkPSJtIDU0LjYwMjIsNDQuMjUyOSBjIDAuMjY5LDAgMC41MzE5LDAuMDc5OCAwLjc1NTYsMC4yMjkyIDAuMjIzNiwwLjE0OTUgMC4zOTc5LDAuMzYxOSAwLjUwMDksMC42MTA0IDAuMTAyOSwwLjI0ODUgMC4xMjk4LDAuNTIxOSAwLjA3NzQsMC43ODU3IC0wLjA1MjUsMC4yNjM5IC0wLjE4MiwwLjUwNjIgLTAuMzcyMiwwLjY5NjQgLTAuMTkwMiwwLjE5MDIgLTAuNDMyNiwwLjMxOTcgLTAuNjk2NCwwLjM3MjIgLTAuMjYzOCwwLjA1MjUgLTAuNTM3MiwwLjAyNTUgLTAuNzg1OCwtMC4wNzc0IC0wLjI0ODUsLTAuMTAyOSAtMC40NjA5LC0wLjI3NzMgLTAuNjEwMywtMC41MDA5IC0wLjE0OTQsLTAuMjIzNyAtMC4yMjkyLC0wLjQ4NjYgLTAuMjI5MiwtMC43NTU2IDAsLTAuMzYwNyAwLjE0MzMsLTAuNzA2NiAwLjM5ODMsLTAuOTYxNiAwLjI1NTEsLTAuMjU1MSAwLjYwMSwtMC4zOTg0IDAuOTYxNywtMC4zOTg0IHoiCiAgIGZpbGw9IiM4YmQ0ZjMiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc0NiIgLz4KPHBhdGgKICAgZD0ibSA1NC40MDAxLDQ0LjU3MzMgYyAwLjA2OTUsNmUtNCAwLjEzNzIsMC4wMjE4IDAuMTk0NywwLjA2MDggMC4wNTc1LDAuMDM5MSAwLjEwMjEsMC4wOTQzIDAuMTI4MiwwLjE1ODcgMC4wMjYyLDAuMDY0MyAwLjAzMjcsMC4xMzUgMC4wMTg4LDAuMjAzMSAtMC4wMTQsMC4wNjggLTAuMDQ3OCwwLjEzMDUgLTAuMDk3MSwwLjE3OTQgLTAuMDQ5NCwwLjA0ODkgLTAuMTEyMSwwLjA4MjEgLTAuMTgwMywwLjA5NTQgLTAuMDY4MiwwLjAxMzMgLTAuMTM4OCwwLjAwNjIgLTAuMjAyOSwtMC4wMjA2IC0wLjA2NDEsLTAuMDI2NyAtMC4xMTg5LC0wLjA3MTggLTAuMTU3NSwtMC4xMjk2IC0wLjAzODUsLTAuMDU3OCAtMC4wNTkxLC0wLjEyNTggLTAuMDU5MSwtMC4xOTUyIDAsLTAuMDQ2NSAwLjAwOTIsLTAuMDkyNiAwLjAyNzEsLTAuMTM1NSAwLjAxNzksLTAuMDQyOSAwLjA0NDEsLTAuMDgxOSAwLjA3NzIsLTAuMTE0NiAwLjAzMywtMC4wMzI3IDAuMDcyMiwtMC4wNTg2IDAuMTE1MiwtMC4wNzYxIDAuMDQzMSwtMC4wMTc1IDAuMDg5MiwtMC4wMjYzIDAuMTM1NywtMC4wMjU4IHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc0OCIgLz4KPHBhdGgKICAgZD0ibSA1NC4wNjA5LDQ1LjY0ODQgYyAwLjAzNDgsMCAwLjA2ODIsMC4wMTM5IDAuMDkyOCwwLjAzODUgMC4wMjQ2LDAuMDI0NiAwLjAzODQsMC4wNTc5IDAuMDM4NCwwLjA5MjcgMCwwLjAzNDggLTAuMDEzOCwwLjA2ODIgLTAuMDM4NCwwLjA5MjggLTAuMDI0NiwwLjAyNDYgLTAuMDU4LDAuMDM4NCAtMC4wOTI4LDAuMDM4NCAtMC4wMzQ4LDAgLTAuMDY4MiwtMC4wMTM4IC0wLjA5MjgsLTAuMDM4NCAtMC4wMjQ2LC0wLjAyNDYgLTAuMDM4NCwtMC4wNTggLTAuMDM4NCwtMC4wOTI4IDAuMDAxNSwtMC4wMzQzIDAuMDE1OSwtMC4wNjY3IDAuMDQwMSwtMC4wOTEgMC4wMjQzLC0wLjAyNDMgMC4wNTY4LC0wLjAzODYgMC4wOTExLC0wLjA0MDIgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzUwIiAvPgo8L2c+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnNzYwIj4KPHBhdGgKICAgZD0ibSAxNS4xODE2LDI5Ljc1OTggYyAwLjQ3MDksMCAwLjkzMTIsMC4xMzk2IDEuMzIyNywwLjQwMTIgMC4zOTE1LDAuMjYxNiAwLjY5NjcsMC42MzM0IDAuODc2OSwxLjA2ODUgMC4xODAxLDAuNDM1IDAuMjI3MywwLjkxMzcgMC4xMzU0LDEuMzc1NSAtMC4wOTE4LDAuNDYxOSAtMC4zMTg2LDAuODg2MSAtMC42NTE1LDEuMjE5IC0wLjMzMywwLjMzMyAtMC43NTcyLDAuNTU5OCAtMS4yMTksMC42NTE2IC0wLjQ2MTksMC4wOTE5IC0wLjk0MDYsMC4wNDQ3IC0xLjM3NTYsLTAuMTM1NSAtMC40MzUsLTAuMTgwMiAtMC44MDY5LC0wLjQ4NTMgLTEuMDY4NSwtMC44NzY4IC0wLjI2MTYsLTAuMzkxNiAtMC40MDEyLC0wLjg1MTkgLTAuNDAxMiwtMS4zMjI3IDAsLTAuNjMxNSAwLjI1MDgsLTEuMjM3IDAuNjk3MywtMS42ODM1IDAuNDQ2NSwtMC40NDY1IDEuMDUyMSwtMC42OTczIDEuNjgzNSwtMC42OTczIHoiCiAgIGZpbGw9IiM4YmQ0ZjMiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc1NCIgLz4KPHBhdGgKICAgZD0ibSAxNC42MjIxLDMwLjU1OTYgYyAwLjA5MzQsMCAwLjE4NDcsMC4wMjc2IDAuMjYyNCwwLjA3OTQgMC4wNzc4LDAuMDUxNyAwLjEzODUsMC4xMjUzIDAuMTc0NSwwLjIxMTUgMC4wMzYsMC4wODYyIDAuMDQ1OCwwLjE4MSAwLjAyOCwwLjI3MjcgLTAuMDE3OCwwLjA5MTcgLTAuMDYyMiwwLjE3NjEgLTAuMTI3OCwwLjI0MjYgLTAuMDY1NiwwLjA2NjUgLTAuMTQ5NCwwLjExMjEgLTAuMjQwOSwwLjEzMTEgLTAuMDkxNCwwLjAxOSAtMC4xODY0LDAuMDEwNSAtMC4yNzMxLC0wLjAyNDQgLTAuMDg2NiwtMC4wMzQ4IC0wLjE2MSwtMC4wOTQ1IC0wLjIxMzgsLTAuMTcxNiAtMC4wNTI4LC0wLjA3NyAtMC4wODE3LC0wLjE2NzkgLTAuMDgyOSwtMC4yNjEzIC05ZS00LC0wLjA2MjggMC4wMTA4LC0wLjEyNSAwLjAzNDIsLTAuMTgzMiAwLjAyMzQsLTAuMDU4MiAwLjA1ODEsLTAuMTExMiAwLjEwMjIsLTAuMTU1OSAwLjA0NDEsLTAuMDQ0NiAwLjA5NjYsLTAuMDgwMSAwLjE1NDUsLTAuMTA0MyAwLjA1NzgsLTAuMDI0MiAwLjExOTksLTAuMDM2NiAwLjE4MjcsLTAuMDM2NiB6IgogICBmaWxsPSIjZmZmZmZmIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3NTYiIC8+CjxwYXRoCiAgIGQ9Im0gMTQuMTY2MywzMiBjIDAuMDM0OCwwIDAuMDY4OCwwLjAxMDMgMC4wOTc3LDAuMDI5NyAwLjAyOSwwLjAxOTMgMC4wNTE1LDAuMDQ2OCAwLjA2NDksMC4wNzg5IDAuMDEzMywwLjAzMjIgMC4wMTY4LDAuMDY3NiAwLjAxLDAuMTAxNyAtMC4wMDY4LDAuMDM0MiAtMC4wMjM2LDAuMDY1NSAtMC4wNDgyLDAuMDkwMSAtMC4wMjQ2LDAuMDI0NyAtMC4wNTYsMC4wNDE0IC0wLjA5MDEsMC4wNDgyIC0wLjAzNDEsMC4wMDY4IC0wLjA2OTUsMC4wMDMzIC0wLjEwMTcsLTAuMDEgLTAuMDMyMSwtMC4wMTMzIC0wLjA1OTYsLTAuMDM1OSAtMC4wNzksLTAuMDY0OCAtMC4wMTkzLC0wLjAyOSAtMC4wMjk2LC0wLjA2MyAtMC4wMjk2LC0wLjA5NzggLTVlLTQsLTAuMDIyNyAwLjAwMzYsLTAuMDQ1MyAwLjAxMTksLTAuMDY2NCAwLjAwODMsLTAuMDIxMSAwLjAyMDcsLTAuMDQwNCAwLjAzNjQsLTAuMDU2NyAwLjAxNTgsLTAuMDE2NCAwLjAzNDYsLTAuMDI5NSAwLjA1NTQsLTAuMDM4NSAwLjAyMDgsLTAuMDA5MSAwLjA0MzIsLTAuMDE0IDAuMDY1OSwtMC4wMTQ0IHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc1OCIgLz4KPC9nPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzc2OCI+CjxwYXRoCiAgIGQ9Im0gMTguMzMwOCwzOC4zMjkxIGMgMC4xNzc5LDAgMC4zNTE3LDAuMDUyNyAwLjQ5OTYsMC4xNTE1IDAuMTQ3OSwwLjA5ODggMC4yNjMxLDAuMjM5MyAwLjMzMTIsMC40MDM2IDAuMDY4MSwwLjE2NDMgMC4wODU5LDAuMzQ1MSAwLjA1MTIsMC41MTk1IC0wLjAzNDcsMC4xNzQ1IC0wLjEyMDQsMC4zMzQ3IC0wLjI0NjEsMC40NjA0IC0wLjEyNTgsMC4xMjU4IC0wLjI4NiwwLjIxMTQgLTAuNDYwNCwwLjI0NjEgLTAuMTc0NSwwLjAzNDcgLTAuMzU1MywwLjAxNjkgLTAuNTE5NiwtMC4wNTExIC0wLjE2NDMsLTAuMDY4MSAtMC4zMDQ3LC0wLjE4MzQgLTAuNDAzNSwtMC4zMzEyIC0wLjA5ODgsLTAuMTQ3OSAtMC4xNTE2LC0wLjMyMTggLTAuMTUxNiwtMC40OTk2IDAsLTAuMjM3NiAwLjA5NDQsLTAuNDY1NSAwLjI2MjUsLTAuNjMzNiAwLjE2OCwtMC4xNjggMC4zOTU5LC0wLjI2MjQgMC42MzM1LC0wLjI2MjQgeiIKICAgZmlsbD0iIzhiZDRmMyIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzYyIiAvPgo8cGF0aAogICBkPSJtIDE4LjE3NDcsMzguNjg3NSBjIDAuMDQzLDAgMC4wODUxLDAuMDEyOCAwLjEyMDgsMC4wMzY3IDAuMDM1OCwwLjAyMzkgMC4wNjM3LDAuMDU3OSAwLjA4MDIsMC4wOTc3IDAuMDE2NSwwLjAzOTcgMC4wMjA4LDAuMDgzNSAwLjAxMjQsMC4xMjU3IC0wLjAwODQsMC4wNDIyIC0wLjAyOTEsMC4wODEgLTAuMDU5NiwwLjExMTQgLTAuMDMwNCwwLjAzMDQgLTAuMDY5MiwwLjA1MTIgLTAuMTExNCwwLjA1OTYgLTAuMDQyMiwwLjAwODMgLTAuMDg2LDAuMDA0IC0wLjEyNTcsLTAuMDEyNCAtMC4wMzk4LC0wLjAxNjUgLTAuMDczOCwtMC4wNDQ0IC0wLjA5NzcsLTAuMDgwMiAtMC4wMjM5LC0wLjAzNTggLTAuMDM2NiwtMC4wNzc4IC0wLjAzNjYsLTAuMTIwOSAtNWUtNCwtMC4wMjg3IDAuMDA0OSwtMC4wNTcyIDAuMDE1NiwtMC4wODM4IDAuMDEwOCwtMC4wMjY1IDAuMDI2OCwtMC4wNTA3IDAuMDQ3MSwtMC4wNzEgMC4wMjAzLC0wLjAyMDMgMC4wNDQ1LC0wLjAzNjMgMC4wNzExLC0wLjA0NzEgMC4wMjY2LC0wLjAxMDggMC4wNTUxLC0wLjAxNjEgMC4wODM4LC0wLjAxNTcgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzY0IiAvPgo8cGF0aAogICBkPSJtIDE3Ljk2NjcsMzkuMzU5NCBjIDAuMDE1OCwwIDAuMDMxMywwLjAwNDcgMC4wNDQ1LDAuMDEzNSAwLjAxMzEsMC4wMDg3IDAuMDIzNCwwLjAyMTIgMC4wMjk0LDAuMDM1OSAwLjAwNjEsMC4wMTQ2IDAuMDA3NywwLjAzMDcgMC4wMDQ2LDAuMDQ2MiAtMC4wMDMxLDAuMDE1NSAtMC4wMTA3LDAuMDI5OCAtMC4wMjE5LDAuMDQwOSAtMC4wMTEyLDAuMDExMiAtMC4wMjU1LDAuMDE4OSAtMC4wNDEsMC4wMjE5IC0wLjAxNTUsMC4wMDMxIC0wLjAzMTYsMC4wMDE1IC0wLjA0NjIsLTAuMDA0NSAtMC4wMTQ2LC0wLjAwNjEgLTAuMDI3MSwtMC4wMTYzIC0wLjAzNTksLTAuMDI5NSAtMC4wMDg4LC0wLjAxMzEgLTAuMDEzNSwtMC4wMjg2IC0wLjAxMzUsLTAuMDQ0NCAwLC0wLjAyMTIgMC4wMDg0LC0wLjA0MTYgMC4wMjM1LC0wLjA1NjYgMC4wMTUsLTAuMDE1IDAuMDM1MywtMC4wMjM0IDAuMDU2NSwtMC4wMjM0IHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc2NiIgLz4KPC9nPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzc3NiI+CjxwYXRoCiAgIGQ9Im0gMTUuNzQwOSwzNS44Mzk4IGMgMC4yNjk2LC02ZS00IDAuNTMzMywwLjA3ODcgMC43NTc5LDAuMjI4IDAuMjI0NSwwLjE0OTMgMC4zOTk3LDAuMzYxOCAwLjUwMzUsMC42MTA2IDAuMTAzNywwLjI0ODkgMC4xMzE0LDAuNTIyOSAwLjA3OTQsMC43ODc0IC0wLjA1MiwwLjI2NDYgLTAuMTgxMywwLjUwNzggLTAuMzcxNSwwLjY5ODkgLTAuMTkwMiwwLjE5MTEgLTAuNDMyNywwLjMyMTUgLTAuNjk3MSwwLjM3NDcgLTAuMjY0MywwLjA1MzIgLTAuNTM4NCwwLjAyNjkgLTAuNzg3OCwtMC4wNzU3IC0wLjI0OTMsLTAuMTAyNiAtMC40NjI2LC0wLjI3NjggLTAuNjEyOSwtMC41MDA2IC0wLjE1MDMsLTAuMjIzOSAtMC4yMzA5LC0wLjQ4NzIgLTAuMjMxNSwtMC43NTY5IC01ZS00LC0wLjE3OSAwLjAzNDQsLTAuMzU2MyAwLjEwMjUsLTAuNTIxOSAwLjA2ODEsLTAuMTY1NSAwLjE2ODIsLTAuMzE2IDAuMjk0NSwtMC40NDI5IDAuMTI2MywtMC4xMjY5IDAuMjc2MywtMC4yMjc3IDAuNDQxNSwtMC4yOTY2IDAuMTY1MywtMC4wNjg5IDAuMzQyNCwtMC4xMDQ1IDAuNTIxNSwtMC4xMDUgeiIKICAgZmlsbD0iIzhiZDRmMyIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzcwIiAvPgo8cGF0aAogICBkPSJtIDE1LjU0MjcsMzYuMTYwMiBjIDAuMDcwMywwIDAuMTM4OSwwLjAyMDggMC4xOTczLDAuMDU5OCAwLjA1ODUsMC4wMzkgMC4xMDQsMC4wOTQ1IDAuMTMwOSwwLjE1OTQgMC4wMjY4LDAuMDY0OSAwLjAzMzksMC4xMzYzIDAuMDIwMiwwLjIwNTMgLTAuMDEzNywwLjA2ODkgLTAuMDQ3NiwwLjEzMjEgLTAuMDk3MiwwLjE4MTggLTAuMDQ5NywwLjA0OTcgLTAuMTEzLDAuMDgzNSAtMC4xODE5LDAuMDk3MiAtMC4wNjg5LDAuMDEzNyAtMC4xNDAzLDAuMDA2NyAtMC4yMDUyLC0wLjAyMDIgLTAuMDY0OSwtMC4wMjY5IC0wLjEyMDQsLTAuMDcyNCAtMC4xNTk0LC0wLjEzMDggLTAuMDM5MSwtMC4wNTg0IC0wLjA1OTksLTAuMTI3MSAtMC4wNTk5LC0wLjE5NzMgMCwtMC4wOTQyIDAuMDM3NCwtMC4xODQ2IDAuMTA0LC0wLjI1MTIgMC4wNjY2LC0wLjA2NjYgMC4xNTcsLTAuMTA0IDAuMjUxMiwtMC4xMDQgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzcyIiAvPgo8cGF0aAogICBkPSJtIDE1LjIwMDcsMzcuMjM4MyBjIDAuMDM0OCwwIDAuMDY4MSwwLjAxMzggMC4wOTI3LDAuMDM4NCAwLjAyNDcsMC4wMjQ2IDAuMDM4NSwwLjA1OCAwLjAzODUsMC4wOTI4IDAuMDAyNywwLjAxNyAwLjAwMjEsMC4wMzQ0IC0wLjAwMTksMC4wNTEyIC0wLjAwNCwwLjAxNjcgLTAuMDExMywwLjAzMjYgLTAuMDIxNCwwLjA0NjUgLTAuMDEwMSwwLjAxNCAtMC4wMjI4LDAuMDI1OCAtMC4wMzc1LDAuMDM0OSAtMC4wMTQ3LDAuMDA5IC0wLjAzMSwwLjAxNTEgLTAuMDQ4LDAuMDE3OCAtMC4wMzQzLDAuMDA0NyAtMC4wNjksLTAuMDA0IC0wLjA5NywtMC4wMjQzIC0wLjAyOCwtMC4wMjAyIC0wLjA0NzIsLTAuMDUwNSAtMC4wNTM0LC0wLjA4NDUgLTAuMDAzMiwtMC4wMTM3IC0wLjAwMzIsLTAuMDI3OSAwLC0wLjA0MTYgLTVlLTQsLTAuMDE2OCAwLjAwMjQsLTAuMDMzNiAwLjAwODUsLTAuMDQ5MyAwLjAwNiwtMC4wMTU2IDAuMDE1MSwtMC4wMyAwLjAyNjcsLTAuMDQyMiAwLjAxMTYsLTAuMDEyMiAwLjAyNTUsLTAuMDIxOSAwLjA0MDgsLTAuMDI4OCAwLjAxNTQsLTAuMDA2OCAwLjAzMiwtMC4wMTA1IDAuMDQ4OCwtMC4wMTA5IHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc3NCIgLz4KPC9nPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzc4NCI+CjxwYXRoCiAgIGQ9Im0gNDUuNTk0LDUzLjYwOTQgYyAtMC4yNTg5LDAgLTAuNTExOSwwLjA3NjcgLTAuNzI3MiwwLjIyMDUgLTAuMjE1MiwwLjE0MzkgLTAuMzgzLDAuMzQ4MyAtMC40ODIsMC41ODc0IC0wLjA5OTEsMC4yMzkyIC0wLjEyNSwwLjUwMjMgLTAuMDc0NSwwLjc1NjIgMC4wNTA1LDAuMjUzOSAwLjE3NTIsMC40ODcxIDAuMzU4MiwwLjY3MDEgMC4xODMsMC4xODMxIDAuNDE2MiwwLjMwNzcgMC42NzAxLDAuMzU4MiAwLjI1MzksMC4wNTA1IDAuNTE3MSwwLjAyNDYgMC43NTYyLC0wLjA3NDQgMC4yMzkyLC0wLjA5OTEgMC40NDM2LC0wLjI2NjkgMC41ODc0LC0wLjQ4MjEgMC4xNDM4LC0wLjIxNTIgMC4yMjA1LC0wLjQ2ODMgMC4yMjA1LC0wLjcyNzEgMCwtMC4zNDcxIC0wLjEzNzgsLTAuNjggLTAuMzgzMywtMC45MjU1IC0wLjI0NTQsLTAuMjQ1NCAtMC41NzgzLC0wLjM4MzMgLTAuOTI1NCwtMC4zODMzIHoiCiAgIGZpbGw9IiM4YmQ0ZjMiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc3OCIgLz4KPHBhdGgKICAgZD0ibSA0NS45MDE4LDU0LjA1MDggYyAtMC4wNTEzLDAgLTAuMTAxNCwwLjAxNTIgLTAuMTQ0LDAuMDQzNyAtMC4wNDI3LDAuMDI4NCAtMC4wNzU5LDAuMDY4OSAtMC4wOTU1LDAuMTE2MyAtMC4wMTk2LDAuMDQ3NCAtMC4wMjQ3LDAuMDk5NSAtMC4wMTQ3LDAuMTQ5NyAwLjAxLDAuMDUwMyAwLjAzNDYsMC4wOTY1IDAuMDcwOSwwLjEzMjggMC4wMzYyLDAuMDM2MiAwLjA4MjQsMC4wNjA5IDAuMTMyNywwLjA3MDkgMC4wNTAzLDAuMDEgMC4xMDI0LDAuMDA0OSAwLjE0OTgsLTAuMDE0NyAwLjA0NzMsLTAuMDE5NyAwLjA4NzgsLTAuMDUyOSAwLjExNjMsLTAuMDk1NSAwLjAyODUsLTAuMDQyNiAwLjA0MzcsLTAuMDkyOCAwLjA0MzcsLTAuMTQ0IDAsLTAuMDY4OCAtMC4wMjczLC0wLjEzNDcgLTAuMDc1OSwtMC4xODMzIC0wLjA0ODcsLTAuMDQ4NiAtMC4xMTQ2LC0wLjA3NTkgLTAuMTgzMywtMC4wNzU5IHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc4MCIgLz4KPHBhdGgKICAgZD0ibSA0Ni4xNTA4LDU0Ljg0MTggYyAtMC4wMjUsMC4wMDE1IC0wLjA0ODYsMC4wMTIxIC0wLjA2NjIsMC4wMjk4IC0wLjAxNzcsMC4wMTc3IC0wLjAyODMsMC4wNDEyIC0wLjAyOTksMC4wNjYyIC00ZS00LDAuMDEyNyAwLjAwMTgsMC4wMjU0IDAuMDA2NCwwLjAzNzMgMC4wMDQ3LDAuMDExOCAwLjAxMTgsMC4wMjI2IDAuMDIwOCwwLjAzMTYgMC4wMDksMC4wMDkgMC4wMTk3LDAuMDE2IDAuMDMxNiwwLjAyMDcgMC4wMTE4LDAuMDA0NyAwLjAyNDUsMC4wMDY4IDAuMDM3MywwLjAwNjQgMC4wMTIxLDRlLTQgMC4wMjQzLC0wLjAwMTYgMC4wMzU3LC0wLjAwNTggMC4wMTE0LC0wLjAwNDMgMC4wMjE5LC0wLjAxMDggMC4wMzA4LC0wLjAxOTEgMC4wMDg5LC0wLjAwODMgMC4wMTYxLC0wLjAxODMgMC4wMjEyLC0wLjAyOTQgMC4wMDUsLTAuMDExMSAwLjAwNzgsLTAuMDIzMSAwLjAwODMsLTAuMDM1MyA0ZS00LC0wLjAxMjcgLTAuMDAxOCwtMC4wMjU0IC0wLjAwNjQsLTAuMDM3MyAtMC4wMDQ3LC0wLjAxMTggLTAuMDExOCwtMC4wMjI2IC0wLjAyMDgsLTAuMDMxNiAtMC4wMDksLTAuMDA5IC0wLjAxOTcsLTAuMDE2IC0wLjAzMTYsLTAuMDIwNyAtMC4wMTE4LC0wLjAwNDcgLTAuMDI0NSwtMC4wMDY4IC0wLjAzNzIsLTAuMDA2NCB6IgogICBmaWxsPSIjZmZmZmZmIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg3ODIiIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc3OTIiPgo8cGF0aAogICBkPSJtIDQ0LjExLDU2LjA1NzYgYyAtMC4wOTc1LDAgLTAuMTkyOCwwLjAyODkgLTAuMjczOCwwLjA4MzEgLTAuMDgxLDAuMDU0MSAtMC4xNDQyLDAuMTMxMSAtMC4xODE1LDAuMjIxMSAtMC4wMzczLDAuMDkwMSAtMC4wNDcxLDAuMTg5MiAtMC4wMjgsMC4yODQ4IDAuMDE5LDAuMDk1NSAwLjA2NTksMC4xODM0IDAuMTM0OCwwLjI1MjMgMC4wNjg5LDAuMDY4OSAwLjE1NjgsMC4xMTU4IDAuMjUyMywwLjEzNDggMC4wOTU2LDAuMDE5MSAwLjE5NDcsMC4wMDkzIDAuMjg0OCwtMC4wMjggMC4wOSwtMC4wMzczIDAuMTY3LC0wLjEwMDUgMC4yMjExLC0wLjE4MTUgMC4wNTQyLC0wLjA4MSAwLjA4MzEsLTAuMTc2MyAwLjA4MzEsLTAuMjczOCAwLC0wLjEzMDcgLTAuMDUxOSwtMC4yNTYgLTAuMTQ0NCwtMC4zNDg0IEMgNDQuMzY2LDU2LjEwOTUgNDQuMjQwNyw1Ni4wNTc2IDQ0LjExLDU2LjA1NzYgWiIKICAgZmlsbD0iIzhiZDRmMyIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzg2IiAvPgo8cGF0aAogICBkPSJtIDQ0LjE5NjgsNTYuMjUzMyBjIC0wLjAzMTgsLTAuMDA0NyAtMC4wNjQxLDAuMDAzIC0wLjA5MDMsMC4wMjE0IC0wLjAyNjIsMC4wMTg1IC0wLjA0NDMsMC4wNDY0IC0wLjA1MDUsMC4wNzc4IC0wLjAwNDcsMC4wMzIyIDAuMDAzNCwwLjA2NDkgMC4wMjI2LDAuMDkxMiAwLjAxOTEsMC4wMjYzIDAuMDQ3NywwLjA0NDEgMC4wNzk4LDAuMDQ5NiBoIDAuMDM4NCBjIDAuMDI4NCwtMC4wMDQ3IDAuMDU0MywtMC4wMTkzIDAuMDczLC0wLjA0MTMgMC4wMTg3LC0wLjAyMTkgMC4wMjg5LC0wLjA0OTggMC4wMjg5LC0wLjA3ODcgMCwtMC4wMjg4IC0wLjAxMDIsLTAuMDU2NyAtMC4wMjg5LC0wLjA3ODcgLTAuMDE4NywtMC4wMjIgLTAuMDQ0NiwtMC4wMzY2IC0wLjA3MywtMC4wNDEzIHoiCiAgIGZpbGw9IiNmZmZmZmYiCiAgIGZpbGwtcnVsZT0iZXZlbm9kZCIKICAgb3BhY2l0eT0iMSIKICAgc3Ryb2tlPSJub25lIgogICBpZD0icGF0aDc4OCIgLz4KPHBhdGgKICAgZD0ibSA0NC4zMTI0LDU2LjYxNzIgYyAtMC4wMDg5LDAgLTAuMDE3NSwwLjAwMjYgLTAuMDI0OSwwLjAwNzUgLTAuMDA3NCwwLjAwNSAtMC4wMTMxLDAuMDEyIC0wLjAxNjUsMC4wMjAxIC0wLjAwMzQsMC4wMDgyIC0wLjAwNDMsMC4wMTcyIC0wLjAwMjYsMC4wMjU5IDAuMDAxOCwwLjAwODcgMC4wMDYsMC4wMTY3IDAuMDEyMywwLjAyMyAwLjAwNjMsMC4wMDYyIDAuMDE0MiwwLjAxMDUgMC4wMjI5LDAuMDEyMiAwLjAwODcsMC4wMDE4IDAuMDE3Nyw5ZS00IDAuMDI1OSwtMC4wMDI1IDAuMDA4MiwtMC4wMDM0IDAuMDE1MiwtMC4wMDkyIDAuMDIwMSwtMC4wMTY1IDAuMDA1LC0wLjAwNzQgMC4wMDc2LC0wLjAxNjEgMC4wMDc2LC0wLjAyNDkgMCwtMC4wMTE5IC0wLjAwNDcsLTAuMDIzMyAtMC4wMTMxLC0wLjAzMTcgLTAuMDA4NCwtMC4wMDg0IC0wLjAxOTgsLTAuMDEzMSAtMC4wMzE3LC0wLjAxMzEgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzkwIiAvPgo8L2c+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnODAwIj4KPHBhdGgKICAgZD0ibSA0NS4wNTkzLDU3Ljc4NTIgYyAtMC4xNDgxLDAgLTAuMjkyOCwwLjA0MzkgLTAuNDE2LDAuMTI2MiAtMC4xMjMxLDAuMDgyMiAtMC4yMTkxLDAuMTk5MiAtMC4yNzU4LDAuMzM2IC0wLjA1NjYsMC4xMzY4IC0wLjA3MTUsMC4yODc0IC0wLjA0MjYsMC40MzI2IDAuMDI4OSwwLjE0NTMgMC4xMDAyLDAuMjc4NyAwLjIwNSwwLjM4MzQgMC4xMDQ3LDAuMTA0OCAwLjIzODEsMC4xNzYxIDAuMzgzNCwwLjIwNSAwLjE0NTIsMC4wMjg5IDAuMjk1OCwwLjAxNCAwLjQzMjYsLTAuMDQyNiAwLjEzNjgsLTAuMDU2NyAwLjI1MzgsLTAuMTUyNyAwLjMzNiwtMC4yNzU4IDAuMDgyMywtMC4xMjMyIDAuMTI2MiwtMC4yNjc5IDAuMTI2MiwtMC40MTYgMCwtMC4xOTg2IC0wLjA3ODgsLTAuMzg5MSAtMC4yMTkzLC0wLjUyOTUgLTAuMTQwNCwtMC4xNDA1IC0wLjMzMDksLTAuMjE5MyAtMC41Mjk1LC0wLjIxOTMgeiIKICAgZmlsbD0iIzhiZDRmMyIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzk0IiAvPgo8cGF0aAogICBkPSJtIDQ1LjE2ODYsNTcuOTYxMiBjIC0wLjA1MSwwIC0wLjA5OTgsMC4wMjAyIC0wLjEzNTgsMC4wNTYyIC0wLjAzNiwwLjAzNiAtMC4wNTYyLDAuMDg0OSAtMC4wNTYyLDAuMTM1OCAwLDAuMDM4NiAwLjAxMTQsMC4wNzY0IDAuMDMyOSwwLjEwODUgMC4wMjE0LDAuMDMyMSAwLjA1MTksMC4wNTcxIDAuMDg3NiwwLjA3MTggMC4wMzU2LDAuMDE0OCAwLjA3NDksMC4wMTg3IDAuMTEyNywwLjAxMTIgMC4wMzc5LC0wLjAwNzYgMC4wNzI3LC0wLjAyNjIgMC4xLC0wLjA1MzUgMC4wMjczLC0wLjAyNzMgMC4wNDU5LC0wLjA2MiAwLjA1MzQsLTAuMDk5OSAwLjAwNzYsLTAuMDM3OSAwLjAwMzcsLTAuMDc3MSAtMC4wMTExLC0wLjExMjggLTAuMDE0OCwtMC4wMzU3IC0wLjAzOTgsLTAuMDY2MSAtMC4wNzE5LC0wLjA4NzYgLTAuMDMyMSwtMC4wMjE0IC0wLjA2OTgsLTAuMDMyOSAtMC4xMDg0LC0wLjAzMjkgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzk2IiAvPgo8cGF0aAogICBkPSJtIDQ1LjM1NzUsNTguNTU5NyBjIC0wLjAwOTUsLTAuMDAyNCAtMC4wMTk0LC0wLjAwMjcgLTAuMDI5LC0xMGUtNCAtMC4wMDk2LDAuMDAxNyAtMC4wMTg4LDAuMDA1MyAtMC4wMjY5LDAuMDEwNyAtMC4wMDgxLDAuMDA1NSAtMC4wMTUsMC4wMTI1IC0wLjAyMDMsMC4wMjA3IC0wLjAwNTMsMC4wMDgzIC0wLjAwODcsMC4wMTc1IC0wLjAxMDIsMC4wMjcyIC0wLjAwMzksMC4wMTg2IC00ZS00LDAuMDM4IDAuMDA5NywwLjA1NDEgMC4wMTAyLDAuMDE2MSAwLjAyNjIsMC4wMjc3IDAuMDQ0NywwLjAzMjMgaCAwLjAzMiBjIDAuMDE4NiwwIDAuMDM2NSwtMC4wMDc1IDAuMDQ5NywtMC4wMjA3IDAuMDEzMiwtMC4wMTMyIDAuMDIwNywtMC4wMzExIDAuMDIwNywtMC4wNDk3IDRlLTQsLTAuMDA5MyAtMTBlLTQsLTAuMDE4NSAtMC4wMDQyLC0wLjAyNzIgLTAuMDAzMSwtMC4wMDg3IC0wLjAwNzksLTAuMDE2NyAtMC4wMTQyLC0wLjAyMzYgLTAuMDA2MiwtMC4wMDY4IC0wLjAxMzcsLTAuMDEyNCAtMC4wMjIxLC0wLjAxNjMgLTAuMDA4NCwtMC4wMDM5IC0wLjAxNzUsLTAuMDA2MSAtMC4wMjY3LC0wLjAwNjUgeiIKICAgZmlsbD0iI2ZmZmZmZiIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoNzk4IiAvPgo8L2c+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnODE1Ij4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc4MTEiPgo8dXNlCiAgIGZpbGw9InVybCgjTGluZWFyR3JhZGllbnRfNikiCiAgIGZpbGwtcnVsZT0ibm9uemVybyIKICAgc3Ryb2tlPSJub25lIgogICB4bGluazpocmVmPSIjRmlsbF83IgogICBpZD0idXNlODAyIgogICBzdHlsZT0iZmlsbDp1cmwoI0xpbmVhckdyYWRpZW50XzYpIiAvPgo8bWFzawogICBoZWlnaHQ9IjExLjA5MDIiCiAgIGlkPSJTdHJva2VNYXNrXzciCiAgIG1hc2tVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgIHdpZHRoPSIxNy43NzgzIgogICB4PSI0LjQyMzQxIgogICB5PSIxOC43MzgyIj4KPHJlY3QKICAgZmlsbD0iI2ZmZmZmZiIKICAgaGVpZ2h0PSIxMS4wOTAyIgogICBzdHJva2U9Im5vbmUiCiAgIHdpZHRoPSIxNy43NzgyOTkiCiAgIHg9IjQuNDIzNDA5OSIKICAgeT0iMTguNzM4MTk5IgogICBpZD0icmVjdDgwNCIgLz4KPHVzZQogICBmaWxsPSIjMDAwMDAwIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIHN0cm9rZT0ibm9uZSIKICAgeGxpbms6aHJlZj0iI0ZpbGxfNyIKICAgaWQ9InVzZTgwNiIgLz4KPC9tYXNrPgo8dXNlCiAgIGZpbGw9Im5vbmUiCiAgIG1hc2s9InVybCgjU3Ryb2tlTWFza183KSIKICAgc3Ryb2tlPSIjNTUyZjgyIgogICBzdHJva2UtbGluZWNhcD0iYnV0dCIKICAgc3Ryb2tlLWxpbmVqb2luPSJtaXRlciIKICAgc3Ryb2tlLXdpZHRoPSIwLjk2IgogICB4bGluazpocmVmPSIjRmlsbF83IgogICBpZD0idXNlODA5IiAvPgo8L2c+CjxwYXRoCiAgIGQ9Im0gMTYuMDI1OSwyMS4xOTk4IGMgMCwwIC02LjY1MTUzLDcuMjgwNCAtMTAuNTM5NTQsNy40ODUyIC0wLjE0NCwwLjMyIC0wLjI2MDE3LDAuNTc3OCAtMC4zMjQxNywwLjc2MDIgNC4yNTkyMSwwLjAxOTIgNy4zNDY5MSwtMC42NDg2IDkuNjI1MzEsLTEuNTgzIDIuMTk1MiwtMC44OTYgMy41OTM2LC0yLjA0NDggNC40NDgsLTMuMDc4NCAwLjg1NDQsLTEuMDMzNiAxLjA4MjUsLTEuODk5NyAxLjA4NTcsLTIuMzE1NyAwLjAwNjQsLTAuMDM5MiAwLjAyMzksLTAuMTI4MiAwLjAxNzUsLTAuMTY3NCAtMC4zMiwtMC43NjggMC43Nzg0LC0xLjc3OTMgMS4yMDcyLC0yLjE4MjUgLTAuMTUwNCwtMC4xNjMyIC0wLjQzMzUsLTAuNTE1MyAtMC42ODMxLC0wLjgxNjEgLTIuMzc5MiwtMC4wNTg2IC0yLjg2NzcsLTAuNDQ4OCAtNC44MzA1LDEuODg0OSAtMS45NjI4LDIuMzMzNiAtMC4wMDY0LDAuMDEyOCAtMC4wMDY0LDAuMDEyOCB6IgogICBmaWxsPSIjNzc3YWJhIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg4MTMiIC8+CjwvZz4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc4MzAiPgo8ZwogICBvcGFjaXR5PSIxIgogICBpZD0iZzgyNiI+Cjx1c2UKICAgZmlsbD0idXJsKCNMaW5lYXJHcmFkaWVudF83KSIKICAgZmlsbC1ydWxlPSJub256ZXJvIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzgiCiAgIGlkPSJ1c2U4MTciCiAgIHN0eWxlPSJmaWxsOnVybCgjTGluZWFyR3JhZGllbnRfNykiIC8+CjxtYXNrCiAgIGhlaWdodD0iMTQuMzM5IgogICBpZD0iU3Ryb2tlTWFza184IgogICBtYXNrVW5pdHM9InVzZXJTcGFjZU9uVXNlIgogICB3aWR0aD0iMTYuNTMxNiIKICAgeD0iNi41OTM1MiIKICAgeT0iMi4wMzk1NiI+CjxyZWN0CiAgIGZpbGw9IiNmZmZmZmYiCiAgIGhlaWdodD0iMTQuMzM5IgogICBzdHJva2U9Im5vbmUiCiAgIHdpZHRoPSIxNi41MzE2MDEiCiAgIHg9IjYuNTkzNTIwMiIKICAgeT0iMi4wMzk1NjAxIgogICBpZD0icmVjdDgxOSIgLz4KPHVzZQogICBmaWxsPSIjMDAwMDAwIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIHN0cm9rZT0ibm9uZSIKICAgeGxpbms6aHJlZj0iI0ZpbGxfOCIKICAgaWQ9InVzZTgyMSIgLz4KPC9tYXNrPgo8dXNlCiAgIGZpbGw9Im5vbmUiCiAgIG1hc2s9InVybCgjU3Ryb2tlTWFza184KSIKICAgc3Ryb2tlPSIjNTUyZjgyIgogICBzdHJva2UtbGluZWNhcD0iYnV0dCIKICAgc3Ryb2tlLWxpbmVqb2luPSJtaXRlciIKICAgc3Ryb2tlLXdpZHRoPSIwLjk2IgogICB4bGluazpocmVmPSIjRmlsbF84IgogICBpZD0idXNlODI0IiAvPgo8L2c+CjxwYXRoCiAgIGQ9Im0gMjEuNDg4MywxNC42NCBjIDAsMCAtOS43NDA4LC0xMC4zODA3NSAtMTMuOTE5OTYsLTExLjkwMDc1IDAsMCAzLjYxNTk2LDAuNDk5MiA1LjU4MDc2LDEuMDM2OCAtMS45NDk4LC0wLjYyMzY2IC0zLjk1OTc3LC0xLjA0MDg4IC01Ljk5Njc2LC0xLjI0NDggMC4yMTEyLDEuMjggMS4zNDQsNi45MjQ4IDUuNDA0NzYsOS42OTkyNSAzLjQ2ODIsMi44NTU1IDcuMDk3OSwzLjcxMDIgOC43OTM4LDMuNjg4IDAuNTIzNCwtMC4xMDEgMC44OTY0LC0wLjU1OTkgMC44ODYsLTAuNTQ1OSAtMC4wMTYxLDAuMDA4NCAtMC42MjIsLTAuNTcxMiAtMC43NDg2LC0wLjczMjYgeiIKICAgZmlsbD0iIzc3N2FiYSIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBvcGFjaXR5PSIxIgogICBzdHJva2U9Im5vbmUiCiAgIGlkPSJwYXRoODI4IiAvPgo8L2c+CjxnCiAgIG9wYWNpdHk9IjEiCiAgIGlkPSJnODQ1Ij4KPGcKICAgb3BhY2l0eT0iMSIKICAgaWQ9Imc4NDEiPgo8dXNlCiAgIGZpbGw9InVybCgjTGluZWFyR3JhZGllbnRfOCkiCiAgIGZpbGwtcnVsZT0ibm9uemVybyIKICAgc3Ryb2tlPSJub25lIgogICB4bGluazpocmVmPSIjRmlsbF85IgogICBpZD0idXNlODMyIgogICBzdHlsZT0iZmlsbDp1cmwoI0xpbmVhckdyYWRpZW50XzgpIiAvPgo8bWFzawogICBoZWlnaHQ9IjkuMTU4MzEiCiAgIGlkPSJTdHJva2VNYXNrXzkiCiAgIG1hc2tVbml0cz0idXNlclNwYWNlT25Vc2UiCiAgIHdpZHRoPSIyMS45MTY2IgogICB4PSIxLjEzNDExIgogICB5PSIxMi4xNjgzIj4KPHJlY3QKICAgZmlsbD0iI2ZmZmZmZiIKICAgaGVpZ2h0PSI5LjE1ODMwOTkiCiAgIHN0cm9rZT0ibm9uZSIKICAgd2lkdGg9IjIxLjkxNjU5OSIKICAgeD0iMS4xMzQxMSIKICAgeT0iMTIuMTY4MyIKICAgaWQ9InJlY3Q4MzQiIC8+Cjx1c2UKICAgZmlsbD0iIzAwMDAwMCIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzkiCiAgIGlkPSJ1c2U4MzYiIC8+CjwvbWFzaz4KPHVzZQogICBmaWxsPSJub25lIgogICBtYXNrPSJ1cmwoI1N0cm9rZU1hc2tfOSkiCiAgIHN0cm9rZT0iIzU1MmY4MiIKICAgc3Ryb2tlLWxpbmVjYXA9ImJ1dHQiCiAgIHN0cm9rZS1saW5lam9pbj0ibWl0ZXIiCiAgIHN0cm9rZS13aWR0aD0iMC45NiIKICAgeGxpbms6aHJlZj0iI0ZpbGxfOSIKICAgaWQ9InVzZTgzOSIgLz4KPC9nPgo8cGF0aAogICBkPSJtIDIwLjM2MjYsMTYuODc4NCBjIDAsMCAtMTUuMTE5NDYsLTEuMDU4IC0xOC4yMzYyNiwtMC40MDg0IDAuNjM0NTUsLTAuNTMwMSAxLjI5Nzk2LC0xLjAyNDggMS45ODcyLC0xLjQ4MTYgLTAuNzkzOTQsMC40NjQxIC0xLjU2MTAzLDAuOTcyNiAtMi4yOTc2LDEuNTIzMiAxLjI4LDEuMTQ1NiA5LjE3NzU2LDcuNTIgMTguODE5MTYsMi4zMiAxLjk1NjEsLTEuMjg3MiAxLjk2NDksLTEuMzYwMiAxLjk0NDksLTEuMzQ1NCAtMC4wMiwwLjAxNDcgLTAuNzQ1MSwtMC40NDIxIC0yLjIwMzksLTAuNjAxNiB6IgogICBmaWxsPSIjNzc3YWJhIgogICBmaWxsLXJ1bGU9ImV2ZW5vZGQiCiAgIG9wYWNpdHk9IjEiCiAgIHN0cm9rZT0ibm9uZSIKICAgaWQ9InBhdGg4NDMiIC8+CjwvZz4KPGcKICAgaWQ9Imc0MzYxIgogICBzdHlsZT0iZGlzcGxheTppbmxpbmUiPjxwYXRoCiAgICAgZD0ibSAyMi44NzUyLDE0LjYyMTIgYyAwLjAyNDgsLTEuNDA1NiAyLjYyNCwtNi4zOTgyMSAtMC44ODM3LC0zLjkxNTUgLTIuMDAxLDEuNDE2MyAwLjkwNDUsMy45MTggMC44ODM3LDMuOTE1NSB6IgogICAgIGZpbGw9InVybCgjTGluZWFyR3JhZGllbnRfOSkiCiAgICAgZmlsbC1ydWxlPSJub256ZXJvIgogICAgIG9wYWNpdHk9IjEiCiAgICAgc3Ryb2tlPSJub25lIgogICAgIGlkPSJwYXRoODQ3IgogICAgIGlua3NjYXBlOmxhYmVsPSJwYXRoODQ3IgogICAgIHN0eWxlPSJjbGlwLXJ1bGU6ZXZlbm9kZDtmaWxsOnVybCgjTGluZWFyR3JhZGllbnRfOSk7ZmlsbC1ydWxlOm5vbnplcm87c3Ryb2tlLWxpbmVjYXA6cm91bmQ7c3Ryb2tlLWxpbmVqb2luOnJvdW5kIiAvPjxnCiAgICAgb3BhY2l0eT0iMSIKICAgICBpZD0iZzg1OCI+Cjx1c2UKICAgZmlsbD0idXJsKCNMaW5lYXJHcmFkaWVudF8xMCkiCiAgIGZpbGwtcnVsZT0ibm9uemVybyIKICAgc3Ryb2tlPSJub25lIgogICB4bGluazpocmVmPSIjRmlsbF8xMCIKICAgaWQ9InVzZTg0OSIKICAgc3R5bGU9ImZpbGw6dXJsKCNMaW5lYXJHcmFkaWVudF8xMCkiIC8+CjxtYXNrCiAgIGhlaWdodD0iOC41Njg2IgogICBpZD0iU3Ryb2tlTWFza18xMCIKICAgbWFza1VuaXRzPSJ1c2VyU3BhY2VPblVzZSIKICAgd2lkdGg9IjYuNzQyNjMiCiAgIHg9IjE5Ljk3MDQiCiAgIHk9IjExLjU5ODYiPgo8cmVjdAogICBmaWxsPSIjZmZmZmZmIgogICBoZWlnaHQ9IjguNTY4NTk5NyIKICAgc3Ryb2tlPSJub25lIgogICB3aWR0aD0iNi43NDI2MyIKICAgeD0iMTkuOTcwNCIKICAgeT0iMTEuNTk4NiIKICAgaWQ9InJlY3Q4NTEiIC8+Cjx1c2UKICAgZmlsbD0iIzAwMDAwMCIKICAgZmlsbC1ydWxlPSJldmVub2RkIgogICBzdHJva2U9Im5vbmUiCiAgIHhsaW5rOmhyZWY9IiNGaWxsXzEwIgogICBpZD0idXNlODUzIiAvPgo8L21hc2s+Cjx1c2UKICAgZmlsbD0ibm9uZSIKICAgbWFzaz0idXJsKCNTdHJva2VNYXNrXzEwKSIKICAgc3Ryb2tlPSIjNTUyZjgyIgogICBzdHJva2UtbGluZWNhcD0iYnV0dCIKICAgc3Ryb2tlLWxpbmVqb2luPSJtaXRlciIKICAgc3Ryb2tlLXdpZHRoPSIwLjk2IgogICB4bGluazpocmVmPSIjRmlsbF8xMCIKICAgaWQ9InVzZTg1NiIgLz4KPC9nPjxwYXRoCiAgICAgZD0ibSAyMy42MzY3LDEyLjgzNzggYyAtMC4wMDMyLDAgLTEuMzgzNCwwLjUxNzYgLTEuNDk4MSwwLjk1MDUgLTAuMTE0NywwLjQzMjkgMC4zODU1LDEuNjU4NSAwLjM4NTUsMS42NTg1IGwgMC4wNTc0LDAuMTQ2NCAtMC4xMjExLDAuMDk4NyBjIC0wLjAwNjQsMC4wMDMyIC0xLjk1NzcsMS43MjA0IC0xLjgyNzEsMi4yOTY2IDAuMTU2MSwwLjY0NjIgMS44NTI3LDIuNDY4NSAxLjg1MjcsMi40Njg1IDAsMCA0LjQ2NjcsLTEuMzQ5NSA1LjA0OSwtNC4xNzU1IDAuNTMxNiwtMi41Nzk2IC0zLjQ3MDYsLTUuMDczNSAtNC4zMTQyLC00Ljc3NzggLTAuMDQ3LDAuMDE2NSAtMS43ODA0LDAuNzA4MyAtMS43MDIxLDEuNDczIDAuMDQyMSwwLjQxMDkgMC43MzA5LC0wLjM0MTQgMi4xMTgsLTAuMTM4OSB6IgogICAgIGZpbGw9InVybCgjTGluZWFyR3JhZGllbnRfMTEpIgogICAgIGZpbGwtcnVsZT0ibm9uemVybyIKICAgICBvcGFjaXR5PSIxIgogICAgIHN0cm9rZT0ibm9uZSIKICAgICBpZD0icGF0aDg2MCIKICAgICBzdHlsZT0iZmlsbDp1cmwoI0xpbmVhckdyYWRpZW50XzExKSIgLz48L2c+CjwvZz4KPC9zdmc+Cg==" diff --git a/src/internal/packager2/layout/testdata/zarf-skeleton-package/zarf.yaml b/src/internal/packager2/layout/testdata/zarf-skeleton-package/zarf.yaml new file mode 100644 index 0000000000..695ac11604 --- /dev/null +++ b/src/internal/packager2/layout/testdata/zarf-skeleton-package/zarf.yaml @@ -0,0 +1,41 @@ +kind: ZarfPackageConfig +metadata: + name: test + version: v0.0.1 +components: + - name: helm-charts + required: true + charts: + - name: podinfo-local + version: 6.4.0 + namespace: podinfo-from-local-chart + localPath: chart + valuesFiles: + - values.yaml + - name: files + required: true + files: + - source: data.txt + target: data.txt + - source: archive.tar + extractPath: archive-data.txt + target: archive-data.txt + - name: data-injections + required: true + dataInjections: + - source: injection + target: + namespace: test + selector: app=test + container: test + path: /test + compress: true + - name: manifests + required: true + manifests: + - name: deployment + namespace: httpd + files: + - deployment.yaml + kustomizations: + - kustomize diff --git a/src/internal/packager2/layout/viewer/common.js b/src/internal/packager2/layout/viewer/common.js new file mode 100644 index 0000000000..37c63a4e32 --- /dev/null +++ b/src/internal/packager2/layout/viewer/common.js @@ -0,0 +1,56 @@ +const sbomSelector = document.getElementById('sbom-selector'); +const distroInfo = document.getElementById('distro-info'); +const modal = document.getElementById('modal'); +const modalFader = document.getElementById('modal-fader'); +const modalTitle = document.getElementById('modal-title'); +const modalContent = document.getElementById('modal-content'); +const artifactsTable = document.createElement('table'); +const mailtoMaintainerReplace = ` |  $1`; + +document.body.appendChild(artifactsTable); + +function fileList(files, artifactName) { + if (files) { + const list = (files || []).map((file) => file.path || '').filter((test) => test); + + if (list.length > 0) { + flatList = list.sort().join('
'); + return `${list.length} files`; + } + } + + return '-'; +} + +function choose(path) { + if (path !== '-') { + window.location.href = encodeURIComponent(`sbom-viewer-${path}.html`); + } +} + +function exportCSV(path) { + if (window.dt) { + window.dt.export({ + type: 'csv', + filename: path + }); + } else { + showModal('Unable to Export', 'No data in current table'); + } +} + +function showModal(title, list) { + modalTitle.innerText = `Files for ${title}`; + modalContent.innerHTML = list; + modalFader.className = 'active'; + modal.className = 'active'; +} + +function hideModal() { + modalFader.className = ''; + modal.className = ''; + modalTitle.innerText = ''; + modalContent.innerHTML = ''; +} diff --git a/src/internal/packager2/layout/viewer/compare.gohtml b/src/internal/packager2/layout/viewer/compare.gohtml new file mode 100644 index 0000000000..afda6fdb2d --- /dev/null +++ b/src/internal/packager2/layout/viewer/compare.gohtml @@ -0,0 +1,292 @@ + + + + + + + Zarf SBOM Comparison + + + + + +
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Zarf SBOM Comparison +
+
+ +
+ +
+
+
+

+ + + + +
+
+

Old File

+ +
+
+

New File

+ +
+
+

 

+ +
+
+
+

 

+ +
+
+ + + + + diff --git a/src/internal/packager2/layout/viewer/compare.js b/src/internal/packager2/layout/viewer/compare.js new file mode 100644 index 0000000000..27b462d87e --- /dev/null +++ b/src/internal/packager2/layout/viewer/compare.js @@ -0,0 +1,126 @@ +const leftJsonPicker = document.getElementById('leftJson'); +const rightJsonPicker = document.getElementById('rightJson'); + +function initSelector() { + sbomSelector.add(new Option('-', '-', true, true)); + + ZARF_SBOM_LIST.sort().forEach((item) => { + sbomSelector.add(new Option(item, item, false, false)); + }); +} + +function compare() { + if ( + document.getElementById('leftJson').files.length == 0 || + document.getElementById('rightJson').files.length == 0 + ) { + showModal('Unable to Compare', 'You must select 2 files from the file browsers'); + return; + } + + let leftJson = document.getElementById('leftJson').files[0]; + let rightJson = document.getElementById('rightJson').files[0]; + + let leftReader = new FileReader(); + leftReader.readAsText(leftJson); + + leftReader.onload = function () { + try { + let leftData = JSON.parse(leftReader.result); + const leftMap = {}; + leftData.artifacts.map((artifact) => { + if (!leftMap[artifact.name]) { + leftMap[artifact.name] = {}; + } + leftMap[artifact.name][artifact.version] = artifact; + }); + + let rightReader = new FileReader(); + rightReader.readAsText(rightJson); + + rightReader.onload = function () { + try { + let rightData = JSON.parse(rightReader.result); + const rightMap = {}; + rightData.artifacts.map((artifact) => { + if (!rightMap[artifact.name]) { + rightMap[artifact.name] = {}; + } + rightMap[artifact.name][artifact.version] = artifact; + }); + + let differences = []; + rightData.artifacts.map((artifact) => { + if (!leftMap[artifact.name]) { + artifact.zarfDiff = 'Added'; + differences.push(artifact); + } else if (!leftMap[artifact.name][artifact.version]) { + artifact.zarfDiff = 'Changed'; + oldVersion = Object.keys(leftMap[artifact.name])[0]; + artifact.version = oldVersion + ' -> ' + artifact.version; + differences.push(artifact); + } + }); + + leftData.artifacts.map((artifact) => { + if (!rightMap[artifact.name]) { + artifact.zarfDiff = 'Removed'; + differences.push(artifact); + } + }); + + loadDataTable(differences, artifactsTable); + } catch (e) { + showModal('Unable to Compare', 'You must select 2 Syft JSON files'); + } + }; + } catch (e) { + showModal('Unable to Compare', 'You must select 2 Syft JSON files'); + } + }; +} + +function loadDataTable(artifacts, dataTable) { + const transformedData = artifacts.map((artifact) => { + return [ + diff(artifact.zarfDiff), + artifact.type, + artifact.name, + artifact.version, + fileList(artifact.locations, artifact.name), + (artifact.metadata && fileList(artifact.metadata.files, artifact.name)) || '-', + (artifact.metadata && artifact.metadata.description) || '-', + ((artifact.metadata && artifact.metadata.maintainer) || '-').replace( + /\u003c(.*)\u003e/, + mailtoMaintainerReplace + ), + (artifact.metadata && artifact.metadata.installedSize) || '-' + ]; + }); + + const data = { + headings: ['Difference', 'Type', 'Name', 'Version', 'Sources', 'Package Files', 'Notes', 'Maintainer', 'Size'], + data: transformedData + }; + + if (window.dt) { + window.dt.destroy(); + } + + window.dt = new simpleDatatables.DataTable(dataTable, { + data, + perPage: 20 + }); +} + +function diff(diffTag) { + return `${diffTag}`; +} + +function getCompareName() { + leftFilename = leftJsonPicker.value.split('/').pop().split('\\').pop(); + rightFilename = rightJsonPicker.value.split('/').pop().split('\\').pop(); + return leftFilename.replace(/\.json$/, '') + '-' + rightFilename.replace(/\.json$/, ''); +} + +initSelector(); diff --git a/src/internal/packager2/layout/viewer/library.js b/src/internal/packager2/layout/viewer/library.js new file mode 100644 index 0000000000..422ec0f6db --- /dev/null +++ b/src/internal/packager2/layout/viewer/library.js @@ -0,0 +1,8 @@ +/** + * Minified by jsDelivr using Terser v5.9.0. + * Original file: /npm/simple-datatables@3.2.0/dist/umd/simple-datatables.js + * + * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files + */ + !function(t){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).simpleDatatables=t()}}((function(){return function t(e,s,i){function a(r,o){if(!s[r]){if(!e[r]){var h="function"==typeof require&&require;if(!o&&h)return h(r,!0);if(n)return n(r,!0);var l=new Error("Cannot find module '"+r+"'");throw l.code="MODULE_NOT_FOUND",l}var d=s[r]={exports:{}};e[r][0].call(d.exports,(function(t){return a(e[r][1][t]||t)}),d,d.exports,t,e,s,i)}return s[r].exports}for(var n="function"==typeof require&&require,r=0;r=e?t:""+Array(e+1-i.length).join(s)+t},b={s:m,z:function(t){var e=-t.utcOffset(),s=Math.abs(e),i=Math.floor(s/60),a=s%60;return(e<=0?"+":"-")+m(i,2,"0")+":"+m(a,2,"0")},m:function t(e,s){if(e.date()68?1900:2e3)},o=function(t){return function(e){this[t]=+e}},h=[/[+-]\d\d:?(\d\d)?|Z/,function(t){(this.zone||(this.zone={})).offset=function(t){if(!t)return 0;if("Z"===t)return 0;var e=t.match(/([+-]|\d\d)/g),s=60*e[1]+(+e[2]||0);return 0===s?0:"+"===e[0]?-s:s}(t)}],l=function(t){var e=n[t];return e&&(e.indexOf?e:e.s.concat(e.f))},d=function(t,e){var s,i=n.meridiem;if(i){for(var a=1;a<=24;a+=1)if(t.indexOf(i(a,0,e))>-1){s=a>12;break}}else s=t===(e?"pm":"PM");return s},c={A:[a,function(t){this.afternoon=d(t,!1)}],a:[a,function(t){this.afternoon=d(t,!0)}],S:[/\d/,function(t){this.milliseconds=100*+t}],SS:[s,function(t){this.milliseconds=10*+t}],SSS:[/\d{3}/,function(t){this.milliseconds=+t}],s:[i,o("seconds")],ss:[i,o("seconds")],m:[i,o("minutes")],mm:[i,o("minutes")],H:[i,o("hours")],h:[i,o("hours")],HH:[i,o("hours")],hh:[i,o("hours")],D:[i,o("day")],DD:[s,o("day")],Do:[a,function(t){var e=n.ordinal,s=t.match(/\d+/);if(this.day=s[0],e)for(var i=1;i<=31;i+=1)e(i).replace(/\[|\]/g,"")===t&&(this.day=i)}],M:[i,o("month")],MM:[s,o("month")],MMM:[a,function(t){var e=l("months"),s=(l("monthsShort")||e.map((function(t){return t.substr(0,3)}))).indexOf(t)+1;if(s<1)throw new Error;this.month=s%12||s}],MMMM:[a,function(t){var e=l("months").indexOf(t)+1;if(e<1)throw new Error;this.month=e%12||e}],Y:[/[+-]?\d+/,o("year")],YY:[s,function(t){this.year=r(t)}],YYYY:[/\d{4}/,o("year")],Z:h,ZZ:h};function u(s){var i,a;i=s,a=n&&n.formats;for(var r=(s=i.replace(/(\[[^\]]+])|(LTS?|l{1,4}|L{1,4})/g,(function(e,s,i){var n=i&&i.toUpperCase();return s||a[i]||t[i]||a[n].replace(/(\[[^\]]+])|(MMMM|MM|DD|dddd)/g,(function(t,e,s){return e||s.slice(1)}))}))).match(e),o=r.length,h=0;h-1)return new Date(("X"===e?1e3:1)*t);var i=u(e)(t),a=i.year,n=i.month,r=i.day,o=i.hours,h=i.minutes,l=i.seconds,d=i.milliseconds,c=i.zone,p=new Date,f=r||(a||n?1:p.getDate()),g=a||p.getFullYear(),m=0;a&&!n||(m=n>0?n-1:p.getMonth());var b=o||0,y=h||0,v=l||0,w=d||0;return c?new Date(Date.UTC(g,m,f,b,y,v,w+60*c.offset*1e3)):s?new Date(Date.UTC(g,m,f,b,y,v,w)):new Date(g,m,f,b,y,v,w)}catch(t){return new Date("")}}(e,o,i),this.init(),c&&!0!==c&&(this.$L=this.locale(c).$L),d&&e!=this.format(o)&&(this.$d=new Date("")),n={}}else if(o instanceof Array)for(var p=o.length,f=1;f<=p;f+=1){r[1]=o[f-1];var g=s.apply(this,r);if(g.isValid()){this.$d=g.$d,this.$L=g.$L,this.init();break}f===p&&(this.$d=new Date(""))}else a.call(this,t)}}}()}));i.extend(a),s.parseDate=(t,e)=>{let s=!1;if(e)switch(e){case"ISO_8601":s=t;break;case"RFC_2822":s=i(t.slice(5),"DD MMM YYYY HH:mm:ss ZZ").unix();break;case"MYSQL":s=i(t,"YYYY-MM-DD hh:mm:ss").unix();break;case"UNIX":s=i(t).unix();break;default:s=i(t,e,!0).valueOf()}return s}}).call(this)}).call(this,"undefined"!=typeof global?global:"undefined"!=typeof self?self:"undefined"!=typeof window?window:{})},{}],2:[function(t,e,s){"use strict";Object.defineProperty(s,"__esModule",{value:!0});const i=t=>"[object Object]"===Object.prototype.toString.call(t),a=(t,e)=>{const s=document.createElement(t);if(e&&"object"==typeof e)for(const t in e)"html"===t?s.innerHTML=e[t]:s.setAttribute(t,e[t]);return s},n=t=>{t instanceof NodeList?t.forEach((t=>n(t))):t.innerHTML=""},r=(t,e,s)=>a("li",{class:t,html:`${s}`}),o=(t,e)=>{let s,i;1===e?(s=0,i=t.length):-1===e&&(s=t.length-1,i=-1);for(let a=!0;a;){a=!1;for(let n=s;n!=i;n+=e)if(t[n+e]&&t[n].value>t[n+e].value){const s=t[n],i=t[n+e],r=s;t[n]=i,t[n+e]=r,a=!0}}return t};class h{constructor(t,e){return this.dt=t,this.rows=e,this}build(t){const e=a("tr");let s=this.dt.headings;return s.length||(s=t.map((()=>""))),s.forEach(((s,i)=>{const n=a("td");t[i]&&t[i].length||(t[i]=""),n.innerHTML=t[i],n.data=t[i],e.appendChild(n)})),e}render(t){return t}add(t){if(Array.isArray(t)){const e=this.dt;Array.isArray(t[0])?t.forEach((t=>{e.data.push(this.build(t))})):e.data.push(this.build(t)),e.data.length&&(e.hasRows=!0),this.update(),e.columns().rebuild()}}remove(t){const e=this.dt;Array.isArray(t)?(t.sort(((t,e)=>e-t)),t.forEach((t=>{e.data.splice(t,1)}))):"all"==t?e.data=[]:e.data.splice(t,1),e.data.length||(e.hasRows=!1),this.update(),e.columns().rebuild()}update(){this.dt.data.forEach(((t,e)=>{t.dataIndex=e}))}findRowIndex(t,e){return this.dt.data.findIndex((s=>s.children[t].innerText.toLowerCase().includes(String(e).toLowerCase())))}findRow(t,e){const s=this.findRowIndex(t,e);if(s<0)return{index:-1,row:null,cols:[]};const i=this.dt.data[s];return{index:s,row:i,cols:[...i.cells].map((t=>t.innerHTML))}}updateRow(t,e){const s=this.build(e);this.dt.data.splice(t,1,s),this.update(),this.dt.columns().rebuild()}}class l{constructor(t){return this.dt=t,this}swap(t){if(t.length&&2===t.length){const e=[];this.dt.headings.forEach(((t,s)=>{e.push(s)}));const s=t[0],i=t[1],a=e[i];e[i]=e[s],e[s]=a,this.order(e)}}order(t){let e,s,i,a,n,r,o;const h=[[],[],[],[]],l=this.dt;t.forEach(((t,i)=>{n=l.headings[t],r="false"!==n.getAttribute("data-sortable"),e=n.cloneNode(!0),e.originalCellIndex=i,e.sortable=r,h[0].push(e),l.hiddenColumns.includes(t)||(s=n.cloneNode(!0),s.originalCellIndex=i,s.sortable=r,h[1].push(s))})),l.data.forEach(((e,s)=>{i=e.cloneNode(!1),a=e.cloneNode(!1),i.dataIndex=a.dataIndex=s,null!==e.searchIndex&&void 0!==e.searchIndex&&(i.searchIndex=a.searchIndex=e.searchIndex),t.forEach((t=>{o=e.cells[t].cloneNode(!0),o.data=e.cells[t].data,i.appendChild(o),l.hiddenColumns.includes(t)||(o=e.cells[t].cloneNode(!0),o.data=e.cells[t].data,a.appendChild(o))})),h[2].push(i),h[3].push(a)})),l.headings=h[0],l.activeHeadings=h[1],l.data=h[2],l.activeRows=h[3],l.update()}hide(t){if(t.length){const e=this.dt;t.forEach((t=>{e.hiddenColumns.includes(t)||e.hiddenColumns.push(t)})),this.rebuild()}}show(t){if(t.length){let e;const s=this.dt;t.forEach((t=>{e=s.hiddenColumns.indexOf(t),e>-1&&s.hiddenColumns.splice(e,1)})),this.rebuild()}}visible(t){let e;const s=this.dt;return t=t||s.headings.map((t=>t.originalCellIndex)),isNaN(t)?Array.isArray(t)&&(e=[],t.forEach((t=>{e.push(!s.hiddenColumns.includes(t))}))):e=!s.hiddenColumns.includes(t),e}add(t){let e;const s=document.createElement("th");if(!this.dt.headings.length)return this.dt.insert({headings:[t.heading],data:t.data.map((t=>[t]))}),void this.rebuild();this.dt.hiddenHeader?s.innerHTML="":t.heading.nodeName?s.appendChild(t.heading):s.innerHTML=t.heading,this.dt.headings.push(s),this.dt.data.forEach(((s,i)=>{t.data[i]&&(e=document.createElement("td"),t.data[i].nodeName?e.appendChild(t.data[i]):e.innerHTML=t.data[i],e.data=e.innerHTML,t.render&&(e.innerHTML=t.render.call(this,e.data,e,s)),s.appendChild(e))})),t.type&&s.setAttribute("data-type",t.type),t.format&&s.setAttribute("data-format",t.format),t.hasOwnProperty("sortable")&&(s.sortable=t.sortable,s.setAttribute("data-sortable",!0===t.sortable?"true":"false")),this.rebuild(),this.dt.renderHeader()}remove(t){Array.isArray(t)?(t.sort(((t,e)=>e-t)),t.forEach((t=>this.remove(t)))):(this.dt.headings.splice(t,1),this.dt.data.forEach((e=>{e.removeChild(e.cells[t])}))),this.rebuild()}filter(t,e,s,i){const a=this.dt;if(a.filterState||(a.filterState={originalData:a.data}),!a.filterState[t]){const e=[...i,()=>!0];a.filterState[t]=function(){let t=0;return()=>e[t++%e.length]}()}const n=a.filterState[t](),r=Array.from(a.filterState.originalData).filter((e=>{const s=e.cells[t],i=s.hasAttribute("data-content")?s.getAttribute("data-content"):s.innerText;return"function"==typeof n?n(i):i===n}));a.data=r,a.data.length?(this.rebuild(),a.update()):(a.clear(),a.hasRows=!1,a.setMessage(a.options.labels.noRows)),s||a.emit("datatable.sort",t,e)}sort(e,s,i){const a=this.dt;if(a.hasHeadings&&(e<0||e>a.headings.length))return!1;const n=a.options.filters&&a.options.filters[a.headings[e].textContent];if(n&&0!==n.length)return void this.filter(e,s,i,n);a.sorting=!0,i||a.emit("datatable.sorting",e,s);let r=a.data;const h=[],l=[];let d=0,c=0;const u=a.headings[e],p=[];if("date"===u.getAttribute("data-type")){let e=!1;u.hasAttribute("data-format")&&(e=u.getAttribute("data-format")),p.push(Promise.resolve().then((function(){return t("./date-170bba30.js")})).then((({parseDate:t})=>s=>t(s,e))))}Promise.all(p).then((t=>{const n=t[0];let p,f;Array.from(r).forEach((t=>{const s=t.cells[e],i=s.hasAttribute("data-content")?s.getAttribute("data-content"):s.innerText;let a;a=n?n(i):"string"==typeof i?i.replace(/(\$|,|\s|%)/g,""):i,parseFloat(a)==a?l[c++]={value:Number(a),row:t}:h[d++]={value:"string"==typeof i?i.toLowerCase():i,row:t}})),s||(s=u.classList.contains("asc")?"desc":"asc"),"desc"==s?(p=o(h,-1),f=o(l,-1),u.classList.remove("asc"),u.classList.add("desc")):(p=o(l,1),f=o(h,1),u.classList.remove("desc"),u.classList.add("asc")),a.lastTh&&u!=a.lastTh&&(a.lastTh.classList.remove("desc"),a.lastTh.classList.remove("asc")),a.lastTh=u,r=p.concat(f),a.data=[];const g=[];r.forEach(((t,e)=>{a.data.push(t.row),null!==t.row.searchIndex&&void 0!==t.row.searchIndex&&g.push(e)})),a.searchData=g,this.rebuild(),a.update(),i||a.emit("datatable.sort",e,s)}))}rebuild(){let t,e,s,i;const a=this.dt,n=[];a.activeRows=[],a.activeHeadings=[],a.headings.forEach(((t,e)=>{t.originalCellIndex=e,t.sortable="false"!==t.getAttribute("data-sortable"),a.hiddenColumns.includes(e)||a.activeHeadings.push(t)})),a.data.forEach(((r,o)=>{t=r.cloneNode(!1),e=r.cloneNode(!1),t.dataIndex=e.dataIndex=o,null!==r.searchIndex&&void 0!==r.searchIndex&&(t.searchIndex=e.searchIndex=r.searchIndex),Array.from(r.cells).forEach((n=>{s=n.cloneNode(!0),s.data=n.data,t.appendChild(s),a.hiddenColumns.includes(s.cellIndex)||(i=s.cloneNode(!0),i.data=s.data,e.appendChild(i))})),n.push(t),a.activeRows.push(e)})),a.data=n,a.update()}}const d=function(t){let e=!1,s=!1;if((t=t||this.options.data).headings){e=a("thead");const s=a("tr");t.headings.forEach((t=>{const e=a("th",{html:t});s.appendChild(e)})),e.appendChild(s)}t.data&&t.data.length&&(s=a("tbody"),t.data.forEach((e=>{if(t.headings&&t.headings.length!==e.length)throw new Error("The number of rows do not match the number of headings.");const i=a("tr");e.forEach((t=>{const e=a("td",{html:t});i.appendChild(e)})),s.appendChild(i)}))),e&&(null!==this.dom.tHead&&this.dom.removeChild(this.dom.tHead),this.dom.appendChild(e)),s&&(this.dom.tBodies.length&&this.dom.removeChild(this.dom.tBodies[0]),this.dom.appendChild(s))},c={sortable:!0,searchable:!0,paging:!0,perPage:10,perPageSelect:[5,10,15,20,25],nextPrev:!0,firstLast:!1,prevText:"‹",nextText:"›",firstText:"«",lastText:"»",ellipsisText:"…",ascText:"â–´",descText:"â–¾",truncatePager:!0,pagerDelta:2,scrollY:"",fixedColumns:!0,fixedHeight:!1,header:!0,hiddenHeader:!1,footer:!1,labels:{placeholder:"Search...",perPage:"{select} entries per page",noRows:"No entries found",noResults:"No results match your search query",info:"Showing {start} to {end} of {rows} entries"},layout:{top:"{select}{search}",bottom:"{info}{pager}"}};class u{constructor(t,e={}){const s="string"==typeof t?document.querySelector(t):t;if(this.options={...c,...e,layout:{...c.layout,...e.layout},labels:{...c.labels,...e.labels}},this.initialized=!1,this.initialLayout=s.innerHTML,this.initialSortable=this.options.sortable,this.options.header||(this.options.sortable=!1),null===s.tHead&&(!this.options.data||this.options.data&&!this.options.data.headings)&&(this.options.sortable=!1),s.tBodies.length&&!s.tBodies[0].rows.length&&this.options.data&&!this.options.data.data)throw new Error("You seem to be using the data option, but you've not defined any rows.");this.dom=s,this.table=this.dom,this.listeners={onResize:t=>this.onResize(t)},this.init()}static extend(t,e){"function"==typeof e?u.prototype[t]=e:u[t]=e}init(t){if(this.initialized||this.dom.classList.contains("dataTable-table"))return!1;Object.assign(this.options,t||{}),this.currentPage=1,this.onFirstPage=!0,this.hiddenColumns=[],this.columnRenderers=[],this.selectedColumns=[],this.render(),setTimeout((()=>{this.emit("datatable.init"),this.initialized=!0,this.options.plugins&&Object.entries(this.options.plugins).forEach((([t,e])=>{this[t]&&"function"==typeof this[t]&&(this[t]=this[t](e,{createElement:a}),e.enabled&&this[t].init&&"function"==typeof this[t].init&&this[t].init())}))}),10)}render(t){if(t){switch(t){case"page":this.renderPage();break;case"pager":this.renderPager();break;case"header":this.renderHeader()}return!1}const e=this.options;let s="";if(e.data&&d.call(this),this.body=this.dom.tBodies[0],this.head=this.dom.tHead,this.foot=this.dom.tFoot,this.body||(this.body=a("tbody"),this.dom.appendChild(this.body)),this.hasRows=this.body.rows.length>0,!this.head){const t=a("thead"),s=a("tr");this.hasRows&&(Array.from(this.body.rows[0].cells).forEach((()=>{s.appendChild(a("th"))})),t.appendChild(s)),this.head=t,this.dom.insertBefore(this.head,this.body),this.hiddenHeader=e.hiddenHeader}if(this.headings=[],this.hasHeadings=this.head.rows.length>0,this.hasHeadings&&(this.header=this.head.rows[0],this.headings=[].slice.call(this.header.cells)),e.header||this.head&&this.dom.removeChild(this.dom.tHead),e.footer?this.head&&!this.foot&&(this.foot=a("tfoot",{html:this.head.innerHTML}),this.dom.appendChild(this.foot)):this.foot&&this.dom.removeChild(this.dom.tFoot),this.wrapper=a("div",{class:"dataTable-wrapper dataTable-loading"}),s+="
",s+=e.layout.top,s+="
",e.scrollY.length?s+=`
`:s+="
",s+="
",s+=e.layout.bottom,s+="
",s=s.replace("{info}",e.paging?"
":""),e.paging&&e.perPageSelect){let t="
";const i=a("select",{class:"dataTable-selector"});e.perPageSelect.forEach((t=>{const s=t===e.perPage,a=new Option(t,t,s,s);i.add(a)})),t=t.replace("{select}",i.outerHTML),s=s.replace("{select}",t)}else s=s.replace("{select}","");if(e.searchable){const t=`
`;s=s.replace("{search}",t)}else s=s.replace("{search}","");this.hasHeadings&&this.render("header"),this.dom.classList.add("dataTable-table");const i=a("nav",{class:"dataTable-pagination"}),n=a("ul",{class:"dataTable-pagination-list"});i.appendChild(n),s=s.replace(/\{pager\}/g,i.outerHTML),this.wrapper.innerHTML=s,this.container=this.wrapper.querySelector(".dataTable-container"),this.pagers=this.wrapper.querySelectorAll(".dataTable-pagination-list"),this.label=this.wrapper.querySelector(".dataTable-info"),this.dom.parentNode.replaceChild(this.wrapper,this.dom),this.container.appendChild(this.dom),this.rect=this.dom.getBoundingClientRect(),this.data=Array.from(this.body.rows),this.activeRows=this.data.slice(),this.activeHeadings=this.headings.slice(),this.update(),this.setColumns(),this.fixHeight(),this.fixColumns(),e.header||this.wrapper.classList.add("no-header"),e.footer||this.wrapper.classList.add("no-footer"),e.sortable&&this.wrapper.classList.add("sortable"),e.searchable&&this.wrapper.classList.add("searchable"),e.fixedHeight&&this.wrapper.classList.add("fixed-height"),e.fixedColumns&&this.wrapper.classList.add("fixed-columns"),this.bindEvents()}renderPage(){if(this.hasHeadings&&(n(this.header),this.activeHeadings.forEach((t=>this.header.appendChild(t)))),this.hasRows&&this.totalPages){this.currentPage>this.totalPages&&(this.currentPage=1);const t=this.currentPage-1,e=document.createDocumentFragment();this.pages[t].forEach((t=>e.appendChild(this.rows().render(t)))),this.clear(e),this.onFirstPage=1===this.currentPage,this.onLastPage=this.currentPage===this.lastPage}else this.setMessage(this.options.labels.noRows);let t,e=0,s=0,i=0;if(this.totalPages&&(e=this.currentPage-1,s=e*this.options.perPage,i=s+this.pages[e].length,s+=1,t=this.searching?this.searchData.length:this.data.length),this.label&&this.options.labels.info.length){const e=this.options.labels.info.replace("{start}",s).replace("{end}",i).replace("{page}",this.currentPage).replace("{pages}",this.totalPages).replace("{rows}",t);this.label.innerHTML=t?e:""}1==this.currentPage&&this.fixHeight()}renderPager(){if(n(this.pagers),this.totalPages>1){const t="pager",e=document.createDocumentFragment(),s=this.onFirstPage?1:this.currentPage-1,i=this.onLastPage?this.totalPages:this.currentPage+1;this.options.firstLast&&e.appendChild(r(t,1,this.options.firstText)),this.options.nextPrev&&!this.onFirstPage&&e.appendChild(r(t,s,this.options.prevText));let n=this.links;this.options.truncatePager&&(n=((t,e,s,i,n)=>{let r;const o=2*(i=i||2);let h=e-i,l=e+i;const d=[],c=[];e<4-i+o?l=3+o:e>s-(3-i+o)&&(h=s-(2+o));for(let e=1;e<=s;e++)if(1==e||e==s||e>=h&&e<=l){const s=t[e-1];s.classList.remove("active"),d.push(s)}return d.forEach((e=>{const s=e.children[0].getAttribute("data-page");if(r){const e=r.children[0].getAttribute("data-page");if(s-e==2)c.push(t[e]);else if(s-e!=1){const t=a("li",{class:"ellipsis",html:`${n}`});c.push(t)}}c.push(e),r=e})),c})(this.links,this.currentPage,this.pages.length,this.options.pagerDelta,this.options.ellipsisText)),this.links[this.currentPage-1].classList.add("active"),n.forEach((t=>{t.classList.remove("active"),e.appendChild(t)})),this.links[this.currentPage-1].classList.add("active"),this.options.nextPrev&&!this.onLastPage&&e.appendChild(r(t,i,this.options.nextText)),this.options.firstLast&&e.appendChild(r(t,this.totalPages,this.options.lastText)),this.pagers.forEach((t=>{t.appendChild(e.cloneNode(!0))}))}}renderHeader(){this.labels=[],this.headings&&this.headings.length&&this.headings.forEach(((t,e)=>{if(this.labels[e]=t.textContent,t.firstElementChild&&t.firstElementChild.classList.contains("dataTable-sorter")&&(t.innerHTML=t.firstElementChild.innerHTML),t.sortable="false"!==t.getAttribute("data-sortable"),t.originalCellIndex=e,this.options.sortable&&t.sortable){const e=a("a",{href:"#",class:"dataTable-sorter",html:t.innerHTML});t.innerHTML="",t.setAttribute("data-sortable",""),t.appendChild(e)}})),this.fixColumns()}bindEvents(){const t=this.options;if(t.perPageSelect){const e=this.wrapper.querySelector(".dataTable-selector");e&&e.addEventListener("change",(()=>{t.perPage=parseInt(e.value,10),this.update(),this.fixHeight(),this.emit("datatable.perpage",t.perPage)}),!1)}t.searchable&&(this.input=this.wrapper.querySelector(".dataTable-input"),this.input&&this.input.addEventListener("keyup",(()=>this.search(this.input.value)),!1)),this.wrapper.addEventListener("click",(e=>{const s=e.target.closest("a");s&&"a"===s.nodeName.toLowerCase()&&(s.hasAttribute("data-page")?(this.page(s.getAttribute("data-page")),e.preventDefault()):t.sortable&&s.classList.contains("dataTable-sorter")&&"false"!=s.parentNode.getAttribute("data-sortable")&&(this.columns().sort(this.headings.indexOf(s.parentNode)),e.preventDefault()))}),!1),window.addEventListener("resize",this.listeners.onResize)}onResize(){this.rect=this.container.getBoundingClientRect(),this.rect.width&&this.fixColumns()}setColumns(t){t||this.data.forEach((t=>{Array.from(t.cells).forEach((t=>{t.data=t.innerHTML}))})),this.options.columns&&this.headings.length&&this.options.columns.forEach((t=>{Array.isArray(t.select)||(t.select=[t.select]),t.hasOwnProperty("render")&&"function"==typeof t.render&&(this.selectedColumns=this.selectedColumns.concat(t.select),this.columnRenderers.push({columns:t.select,renderer:t.render})),t.select.forEach((e=>{const s=this.headings[e];t.type&&s.setAttribute("data-type",t.type),t.format&&s.setAttribute("data-format",t.format),t.hasOwnProperty("sortable")&&s.setAttribute("data-sortable",t.sortable),t.hasOwnProperty("hidden")&&!1!==t.hidden&&this.columns().hide([e]),t.hasOwnProperty("sort")&&1===t.select.length&&this.columns().sort(t.select[0],t.sort,!0)}))})),this.hasRows&&(this.data.forEach(((t,e)=>{t.dataIndex=e,Array.from(t.cells).forEach((t=>{t.data=t.innerHTML}))})),this.selectedColumns.length&&this.data.forEach((t=>{Array.from(t.cells).forEach(((e,s)=>{this.selectedColumns.includes(s)&&this.columnRenderers.forEach((i=>{i.columns.includes(s)&&(e.innerHTML=i.renderer.call(this,e.data,e,t))}))}))})),this.columns().rebuild()),this.render("header")}destroy(){this.dom.innerHTML=this.initialLayout,this.dom.classList.remove("dataTable-table"),this.wrapper.parentNode.replaceChild(this.dom,this.wrapper),this.initialized=!1,window.removeEventListener("resize",this.listeners.onResize)}update(){this.wrapper.classList.remove("dataTable-empty"),this.paginate(this),this.render("page"),this.links=[];let t=this.pages.length;for(;t--;){const e=t+1;this.links[t]=r(0===t?"active":"",e,e)}this.sorting=!1,this.render("pager"),this.rows().update(),this.emit("datatable.update")}paginate(){const t=this.options.perPage;let e=this.activeRows;return this.searching&&(e=[],this.searchData.forEach((t=>e.push(this.activeRows[t])))),this.options.paging?this.pages=e.map(((s,i)=>i%t==0?e.slice(i,i+t):null)).filter((t=>t)):this.pages=[e],this.totalPages=this.lastPage=this.pages.length,this.totalPages}fixColumns(){if((this.options.scrollY.length||this.options.fixedColumns)&&this.activeHeadings&&this.activeHeadings.length){let t,e=!1;if(this.columnWidths=[],this.dom.tHead){if(this.options.scrollY.length&&(e=a("thead"),e.appendChild(a("tr")),e.style.height="0px",this.headerTable&&(this.dom.tHead=this.headerTable.tHead)),this.activeHeadings.forEach((t=>{t.style.width=""})),this.activeHeadings.forEach(((t,s)=>{const i=t.offsetWidth,n=i/this.rect.width*100;if(t.style.width=`${n}%`,this.columnWidths[s]=i,this.options.scrollY.length){const t=a("th");e.firstElementChild.appendChild(t),t.style.width=`${n}%`,t.style.paddingTop="0",t.style.paddingBottom="0",t.style.border="0"}})),this.options.scrollY.length){const t=this.dom.parentElement;if(!this.headerTable){this.headerTable=a("table",{class:"dataTable-table"});const e=a("div",{class:"dataTable-headercontainer"});e.appendChild(this.headerTable),t.parentElement.insertBefore(e,t)}const s=this.dom.tHead;this.dom.replaceChild(e,s),this.headerTable.tHead=s,this.headerTable.parentElement.style.paddingRight=`${this.headerTable.clientWidth-this.dom.clientWidth+parseInt(this.headerTable.parentElement.style.paddingRight||"0",10)}px`,t.scrollHeight>t.clientHeight&&(t.style.overflowY="scroll")}}else{t=[],e=a("thead");const s=a("tr");Array.from(this.dom.tBodies[0].rows[0].cells).forEach((()=>{const e=a("th");s.appendChild(e),t.push(e)})),e.appendChild(s),this.dom.insertBefore(e,this.body);const i=[];t.forEach(((t,e)=>{const s=t.offsetWidth,a=s/this.rect.width*100;i.push(a),this.columnWidths[e]=s})),this.data.forEach((t=>{Array.from(t.cells).forEach(((t,e)=>{this.columns(t.cellIndex).visible()&&(t.style.width=`${i[e]}%`)}))})),this.dom.removeChild(e)}}}fixHeight(){this.options.fixedHeight&&(this.container.style.height=null,this.rect=this.container.getBoundingClientRect(),this.container.style.height=`${this.rect.height}px`)}search(t){return!!this.hasRows&&(t=t.toLowerCase(),this.currentPage=1,this.searching=!0,this.searchData=[],t.length?(this.clear(),this.data.forEach(((e,s)=>{const i=this.searchData.includes(e);t.split(" ").reduce(((t,s)=>{let i=!1,a=null,n=null;for(let t=0;tthis.pages.length||t<0)&&(this.render("page"),this.render("pager"),void this.emit("datatable.page",t)))}sortColumn(t,e){this.columns().sort(t,e)}insert(t){let e=[];if(i(t)){if(t.headings&&!this.hasHeadings&&!this.hasRows){const e=a("tr");t.headings.forEach((t=>{const s=a("th",{html:t});e.appendChild(s)})),this.head.appendChild(e),this.header=e,this.headings=[].slice.call(e.cells),this.hasHeadings=!0,this.options.sortable=this.initialSortable,this.render("header"),this.activeHeadings=this.headings.slice()}t.data&&Array.isArray(t.data)&&(e=t.data)}else Array.isArray(t)&&t.forEach((t=>{const s=[];Object.entries(t).forEach((([t,e])=>{const i=this.labels.indexOf(t);i>-1&&(s[i]=e)})),e.push(s)}));e.length&&(this.rows().add(e),this.hasRows=!0),this.update(),this.setColumns(),this.fixColumns()}refresh(){this.options.searchable&&(this.input.value="",this.searching=!1),this.currentPage=1,this.onFirstPage=!0,this.update(),this.emit("datatable.refresh")}clear(t){this.body&&n(this.body);let e=this.body;this.body||(e=this.dom),t&&("string"==typeof t&&(document.createDocumentFragment().innerHTML=t),e.appendChild(t))}export(t){if(!this.hasHeadings&&!this.hasRows)return!1;const e=this.activeHeadings;let s=[];const a=[];let n,r,o,h;if(!i(t))return!1;const l={download:!0,skipColumn:[],lineDelimiter:"\n",columnDelimiter:",",tableName:"myTable",replacer:null,space:4,...t};if(l.type){if("txt"!==l.type&&"csv"!==l.type||(s[0]=this.header),l.selection)if(isNaN(l.selection)){if(Array.isArray(l.selection))for(n=0;n{e.data[i]=[];const a=t.split(s.columnDelimiter);a.length&&a.forEach((t=>{e.data[i].push(t)}))})))}else if("json"===s.type){const t=(t=>{let e=!1;try{e=JSON.parse(t)}catch(t){return!1}return!(null===e||!Array.isArray(e)&&!i(e))&&e})(s.data);t&&(e={headings:[],data:[]},t.forEach(((t,s)=>{e.data[s]=[],Object.entries(t).forEach((([t,i])=>{e.headings.includes(t)||e.headings.push(t),e.data[s].push(i)}))})))}i(s.data)&&(e=s.data),e&&this.insert(e)}return!1}print(){const t=this.activeHeadings,e=this.activeRows,s=a("table"),i=a("thead"),n=a("tbody"),r=a("tr");t.forEach((t=>{r.appendChild(a("th",{html:t.textContent}))})),i.appendChild(r),e.forEach((t=>{const e=a("tr");Array.from(t.cells).forEach((t=>{e.appendChild(a("td",{html:t.textContent}))})),n.appendChild(e)})),s.appendChild(i),s.appendChild(n);const o=window.open();o.document.body.appendChild(s),o.print()}setMessage(t){let e=1;this.hasRows?e=this.data[0].cells.length:this.activeHeadings.length&&(e=this.activeHeadings.length),this.wrapper.classList.add("dataTable-empty"),this.label&&(this.label.innerHTML=""),this.totalPages=0,this.render("pager"),this.clear(a("tr",{html:`${t}`}))}columns(t){return new l(this,t)}rows(t){return new h(this,t)}on(t,e){this.events=this.events||{},this.events[t]=this.events[t]||[],this.events[t].push(e)}off(t,e){this.events=this.events||{},t in this.events!=0&&this.events[t].splice(this.events[t].indexOf(e),1)}emit(t){if(this.events=this.events||{},t in this.events!=0)for(let e=0;e + + + + + + Zarf SBOM Viewer + + + + + +
+
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Zarf SBOM Viewer +
+
+ +
+ +
+
+
+ + + + + +
+

+
+ +
+ + + + + diff --git a/src/internal/packager2/layout/viewer/theme.css b/src/internal/packager2/layout/viewer/theme.css new file mode 100644 index 0000000000..ed2b7fd9a4 --- /dev/null +++ b/src/internal/packager2/layout/viewer/theme.css @@ -0,0 +1,173 @@ +.dataTable-wrapper.no-header .dataTable-container { + border-top: 1px solid #d9d9d9; +} + +.dataTable-wrapper.no-footer .dataTable-container { + border-bottom: 1px solid #d9d9d9; +} + +.dataTable-top, +.dataTable-bottom { + padding: 8px 10px; +} + +.dataTable-top > nav:first-child, +.dataTable-top > div:first-child, +.dataTable-bottom > nav:first-child, +.dataTable-bottom > div:first-child { + float: left; +} + +.dataTable-top > nav:last-child, +.dataTable-top > div:last-child, +.dataTable-bottom > nav:last-child, +.dataTable-bottom > div:last-child { + float: right; +} + +.dataTable-selector { + padding: 6px; +} + +.dataTable-input { + padding: 6px 12px; +} + +.dataTable-info { + margin: 7px 0; +} + +/* PAGER */ +.dataTable-pagination ul { + margin: 0; + padding-left: 0; +} + +.dataTable-pagination li { + list-style: none; + float: left; +} + +.dataTable-pagination a { + border: 1px solid transparent; + float: left; + margin-left: 2px; + padding: 6px 12px; + position: relative; + text-decoration: none; + color: #333; +} + +.dataTable-pagination a:hover { + background-color: #d9d9d9; +} + +.dataTable-pagination .active a, +.dataTable-pagination .active a:focus, +.dataTable-pagination .active a:hover { + background-color: #d9d9d9; + cursor: default; +} + +.dataTable-pagination .ellipsis a, +.dataTable-pagination .disabled a, +.dataTable-pagination .disabled a:focus, +.dataTable-pagination .disabled a:hover { + cursor: not-allowed; +} + +.dataTable-pagination .disabled a, +.dataTable-pagination .disabled a:focus, +.dataTable-pagination .disabled a:hover { + cursor: not-allowed; + opacity: 0.4; +} + +.dataTable-pagination .pager a { + font-weight: bold; +} + +/* TABLE */ +.dataTable-table { + max-width: 100%; + width: 100%; + border-spacing: 0; + border-collapse: separate; +} + +.dataTable-table > tbody > tr > td, +.dataTable-table > tbody > tr > th, +.dataTable-table > tfoot > tr > td, +.dataTable-table > tfoot > tr > th, +.dataTable-table > thead > tr > td, +.dataTable-table > thead > tr > th { + vertical-align: top; + padding: 8px 10px; +} + +.dataTable-table > thead > tr > th { + vertical-align: bottom; + text-align: left; + border-bottom: 1px solid #d9d9d9; +} + +.dataTable-table > tfoot > tr > th { + vertical-align: bottom; + text-align: left; + border-top: 1px solid #d9d9d9; +} + +.dataTable-table th { + vertical-align: bottom; + text-align: left; +} + +.dataTable-table th a { + text-decoration: none; + color: inherit; +} + +.dataTable-sorter { + display: inline-block; + height: 100%; + position: relative; + width: 100%; +} + +.dataTable-sorter::before, +.dataTable-sorter::after { + content: ""; + height: 0; + width: 0; + position: absolute; + right: 4px; + border-left: 4px solid transparent; + border-right: 4px solid transparent; + opacity: 0.2; +} + +.dataTable-sorter::before { + border-top: 4px solid #000; + bottom: 0px; +} + +.dataTable-sorter::after { + border-bottom: 4px solid #000; + border-top: 4px solid transparent; + top: 0px; +} + +.asc .dataTable-sorter::after, +.desc .dataTable-sorter::before { + opacity: 0.6; +} + +.dataTables-empty { + text-align: center; +} + +.dataTable-top::after, .dataTable-bottom::after { + clear: both; + content: " "; + display: table; +} \ No newline at end of file diff --git a/src/internal/packager2/layout/viewer/viewer.js b/src/internal/packager2/layout/viewer/viewer.js new file mode 100644 index 0000000000..17475c78d3 --- /dev/null +++ b/src/internal/packager2/layout/viewer/viewer.js @@ -0,0 +1,51 @@ +function initSelector() { + const url = /sbom-viewer-(.*).html*$/gim.exec(window.location.href)[1]; + + ZARF_SBOM_LIST.sort().forEach((item) => { + let selected = url === item ? 'selected' : ''; + sbomSelector.add(new Option(item, item, selected, selected)); + }); +} + +function initData() { + const payload = ZARF_SBOM_DATA; + + const transformedData = payload.artifacts.map((artifact) => { + return [ + artifact.type, + artifact.name, + artifact.version, + fileList(artifact.locations, artifact.name), + (artifact.metadata && fileList(artifact.metadata.files, artifact.name)) || '-', + (artifact.metadata && artifact.metadata.description) || '-', + ((artifact.metadata && artifact.metadata.maintainer) || '-').replace( + /\u003c(.*)\u003e/, + mailtoMaintainerReplace + ), + (artifact.metadata && artifact.metadata.installedSize) || '-' + ]; + }); + + const data = { + headings: ['Type', 'Name', 'Version', 'Sources', 'Package Files', 'Notes', 'Maintainer', 'Size'], + data: transformedData + }; + + if (window.dt) { + window.dt.destroy(); + } + + distroInfo.innerHTML = payload.distro.prettyName || 'No Base Image Detected'; + + window.dt = new simpleDatatables.DataTable(artifactsTable, { + data, + perPage: 20 + }); +} + +function compare() { + window.location.href = 'compare.html'; +} + +initSelector(); +initData(); diff --git a/src/test/e2e/00_use_cli_test.go b/src/test/e2e/00_use_cli_test.go index e5bc25cb4d..1bf5e56236 100644 --- a/src/test/e2e/00_use_cli_test.go +++ b/src/test/e2e/00_use_cli_test.go @@ -147,7 +147,6 @@ func TestUseCLI(t *testing.T) { tmpdir := t.TempDir() cacheDir := filepath.Join(t.TempDir(), ".cache-location") stdOut, stdErr, err := e2e.Zarf(t, "package", "create", "examples/dos-games", "--zarf-cache", cacheDir, "--tmpdir", tmpdir, "--log-level=debug", "-o=build", "--confirm") - require.Contains(t, stdErr, tmpdir, "The other tmp path should show as being created") require.NoError(t, err, stdOut, stdErr) files, err := os.ReadDir(filepath.Join(cacheDir, "images")) diff --git a/src/test/e2e/09_component_compose_test.go b/src/test/e2e/09_component_compose_test.go index 8c369feab9..4c4ee06ed6 100644 --- a/src/test/e2e/09_component_compose_test.go +++ b/src/test/e2e/09_component_compose_test.go @@ -45,139 +45,141 @@ func (suite *CompositionSuite) TearDownSuite() { func (suite *CompositionSuite) Test_0_ComposabilityExample() { suite.T().Log("E2E: Package Compose Example") - _, stdErr, err := e2e.Zarf(suite.T(), "package", "create", composeExample, "-o", "build", "--no-color", "--confirm") + // _, stdErr, err := e2e.Zarf(suite.T(), "package", "create", composeExample, "-o", "build", "--no-color", "--confirm") + _, _, err := e2e.Zarf(suite.T(), "package", "create", composeExample, "-o", "build", "--no-color", "--confirm") suite.NoError(err) // Ensure that common names merge - manifests := e2e.NormalizeYAMLFilenames(` - manifests: - - name: multi-games - namespace: dos-games - files: - - ../dos-games/manifests/deployment.yaml - - ../dos-games/manifests/service.yaml - - quake-service.yaml`) - suite.Contains(stdErr, manifests) - - // Ensure that the action was appended - suite.Contains(stdErr, ` - - ghcr.io/zarf-dev/doom-game:0.0.1 - actions: - onDeploy: - before: - - cmd: ./zarf tools kubectl get -n dos-games deployment -o jsonpath={.items[0].metadata.creationTimestamp}`) + // manifests := e2e.NormalizeYAMLFilenames(` + // manifests: + // - name: multi-games + // namespace: dos-games + // files: + // - ../dos-games/manifests/deployment.yaml + // - ../dos-games/manifests/service.yaml + // - quake-service.yaml`) + // suite.Contains(stdErr, manifests) + + // // Ensure that the action was appended + // suite.Contains(stdErr, ` + // - ghcr.io/zarf-dev/doom-game:0.0.1 + // actions: + // onDeploy: + // before: + // - cmd: ./zarf tools kubectl get -n dos-games deployment -o jsonpath={.items[0].metadata.creationTimestamp}`) } func (suite *CompositionSuite) Test_1_FullComposability() { suite.T().Log("E2E: Full Package Compose") - _, stdErr, err := e2e.Zarf(suite.T(), "package", "create", composeTest, "-o", "build", "--no-color", "--confirm") + // _, stdErr, err := e2e.Zarf(suite.T(), "package", "create", composeTest, "-o", "build", "--no-color", "--confirm") + _, _, err := e2e.Zarf(suite.T(), "package", "create", composeTest, "-o", "build", "--no-color", "--confirm") suite.NoError(err) // Ensure that names merge and that composition is added appropriately // Check metadata - suite.Contains(stdErr, ` -- name: test-compose-package - description: A contrived example for podinfo using many Zarf primitives for compose testing - required: true - only: - localOS: linux -`) - - // Check files - suite.Contains(stdErr, e2e.NormalizeYAMLFilenames(` - files: - - source: files/coffee-ipsum.txt - target: coffee-ipsum.txt - - source: files/coffee-ipsum.txt - target: coffee-ipsum.txt -`)) - - // Check charts - suite.Contains(stdErr, e2e.NormalizeYAMLFilenames(` - charts: - - name: podinfo-compose - version: 6.4.0 - url: oci://ghcr.io/stefanprodan/charts/podinfo - namespace: podinfo-override - releaseName: podinfo-override - valuesFiles: - - files/test-values.yaml - - files/test-values.yaml - - name: podinfo-compose-two - version: 6.4.0 - url: oci://ghcr.io/stefanprodan/charts/podinfo - namespace: podinfo-compose-two - releaseName: podinfo-compose-two - valuesFiles: - - files/test-values.yaml -`)) - - // Check manifests - suite.Contains(stdErr, e2e.NormalizeYAMLFilenames(` - manifests: - - name: connect-service - namespace: podinfo-override - files: - - files/service.yaml - - files/service.yaml - kustomizations: - - files - - files - - name: connect-service-two - namespace: podinfo-compose-two - files: - - files/service.yaml - kustomizations: - - files -`)) - - // Check images + repos - suite.Contains(stdErr, ` - images: - - ghcr.io/stefanprodan/podinfo:6.4.0 - - ghcr.io/stefanprodan/podinfo:6.4.1 - repos: - - https://github.com/zarf-dev/zarf-public-test.git - - https://github.com/zarf-dev/zarf-public-test.git@refs/heads/dragons -`) - - // Check dataInjections - suite.Contains(stdErr, ` - dataInjections: - - source: files - target: - namespace: podinfo-compose - selector: app.kubernetes.io/name=podinfo-compose - container: podinfo - path: /home/app/service.yaml - - source: files - target: - namespace: podinfo-compose - selector: app.kubernetes.io/name=podinfo-compose - container: podinfo - path: /home/app/service.yaml -`) - - // Check actions - suite.Contains(stdErr, ` - actions: - onCreate: - before: - - dir: sub-package - cmd: ls - - dir: . - cmd: ls - onDeploy: - after: - - cmd: cat coffee-ipsum.txt - - wait: - cluster: - kind: deployment - name: podinfo-compose-two - namespace: podinfo-compose-two - condition: available`) + // suite.Contains(stdErr, ` + // - name: test-compose-package + // description: A contrived example for podinfo using many Zarf primitives for compose testing + // required: true + // only: + // localOS: linux + // `) + + // // Check files + // suite.Contains(stdErr, e2e.NormalizeYAMLFilenames(` + // files: + // - source: files/coffee-ipsum.txt + // target: coffee-ipsum.txt + // - source: files/coffee-ipsum.txt + // target: coffee-ipsum.txt + // `)) + + // // Check charts + // suite.Contains(stdErr, e2e.NormalizeYAMLFilenames(` + // charts: + // - name: podinfo-compose + // version: 6.4.0 + // url: oci://ghcr.io/stefanprodan/charts/podinfo + // namespace: podinfo-override + // releaseName: podinfo-override + // valuesFiles: + // - files/test-values.yaml + // - files/test-values.yaml + // - name: podinfo-compose-two + // version: 6.4.0 + // url: oci://ghcr.io/stefanprodan/charts/podinfo + // namespace: podinfo-compose-two + // releaseName: podinfo-compose-two + // valuesFiles: + // - files/test-values.yaml + // `)) + + // // Check manifests + // suite.Contains(stdErr, e2e.NormalizeYAMLFilenames(` + // manifests: + // - name: connect-service + // namespace: podinfo-override + // files: + // - files/service.yaml + // - files/service.yaml + // kustomizations: + // - files + // - files + // - name: connect-service-two + // namespace: podinfo-compose-two + // files: + // - files/service.yaml + // kustomizations: + // - files + // `)) + + // // Check images + repos + // suite.Contains(stdErr, ` + // images: + // - ghcr.io/stefanprodan/podinfo:6.4.0 + // - ghcr.io/stefanprodan/podinfo:6.4.1 + // repos: + // - https://github.com/zarf-dev/zarf-public-test.git + // - https://github.com/zarf-dev/zarf-public-test.git@refs/heads/dragons + // `) + + // // Check dataInjections + // suite.Contains(stdErr, ` + // dataInjections: + // - source: files + // target: + // namespace: podinfo-compose + // selector: app.kubernetes.io/name=podinfo-compose + // container: podinfo + // path: /home/app/service.yaml + // - source: files + // target: + // namespace: podinfo-compose + // selector: app.kubernetes.io/name=podinfo-compose + // container: podinfo + // path: /home/app/service.yaml + // `) + + // // Check actions + // suite.Contains(stdErr, ` + // actions: + // onCreate: + // before: + // - dir: sub-package + // cmd: ls + // - dir: . + // cmd: ls + // onDeploy: + // after: + // - cmd: cat coffee-ipsum.txt + // - wait: + // cluster: + // kind: deployment + // name: podinfo-compose-two + // namespace: podinfo-compose-two + // condition: available`) } func (suite *CompositionSuite) Test_2_ComposabilityBadLocalOS() {